I'm using .htaccess to control source IP of connections to my web application. My configuration looks more or less like this:
deny from all
allow from X.Y.Z.Q
These days we can trust less and less things, every days some commonly used technique is found to be vulnerable. So I started to ask myself questions:
- Is this method really save and sufficient?
- Should I employ some additional mechanism to protect my web-app better?
I am using Apache 2.2.24 and PHP 5.4.17 in Fast-CGI mode.
Thanks in advance!