Admin領域へのIPアドレスによるアクセス制限

var $components = array('ReplacePrefix', 'Auth','Cookie','AuthConfigure', 'EmailEx');

var $components = array('ReplacePrefix', 'Auth','Cookie','AuthConfigure', 'EmailEx','RequestHandler');

function beforeFilter() {

	// IPアドレスによるアクセス制限
	$ip = $this->RequestHandler->getClientIP();
	$allowip = 'XXX.XXX.XXX.XXX';
	if ($ip == $allowip) {

		/* 認証設定 */
		// beforeFilterの前に記述する必要あり
		$this->Auth->allow('mypage_login', 'admin_login', 'admin_logout','admin_login_exec', 'admin_reset_password');
		if(isset($this->params['prefix'])) {
			$this->Auth->allow($this->params['prefix'].'_login', $this->params['prefix'].'_logout', $this->params['prefix'].'_reset_password');
			$this->set('usePermission',$this->UserGroup->checkOtherAdmins());
		}

		parent::beforeFilter();

		$this->ReplacePrefix->allow('login', 'logout', 'reset_password', 'auth_prefix_error');

	}
}

#Basic認証を使う場合 ******は.htpasswdのフルパス
AuthUserFile ******
AuthGroupFile /dev/null
AuthName "Input ID and Password."
AuthType Basic
require valid-user

#以下IP制限 xxx.xxx.xxx.xxxは任意の許可IP
order deny,allow
deny from all
allow from xxx.xxx.xxx.xxx

<IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteRule ^/$ ../index.php?url=admin/index [QSA,L]
    RewriteRule ^(.*)$ ../index.php?url=admin/$1 [QSA,L]
</IfModule>

$hosts = array('192.168.0.1','192.168.1.1','localhost','127.0.0.1');
if(preg_match("/^\/admin.*/i",$_SERVER['PATH_INFO'])){//adminが含まれていたら
        if(!in_array($_SERVER['REMOTE_ADDR'],$hosts)){//$hosts以外のIPはルートにリダイレクトする
                header("HTTP/1.1 301 Moved Permanently");
                header("Location: http://$_SERVER[HTTP_HOST]/");
                exit();
        }
}

app
　|- plugins
　　　　|- admin_permission
　　　　　　|- controllers
　　　　　　　　|-components
　　　　　　　　　　|- admin_permission_hook.php

class AdminPermissionHookComponent extends Object {
	
	var $registerHooks = array('initialize','beforeRender');
	var $allowClients = array('192.168.0.1','192.168.1.1','localhost','127.0.0.1');
	function initialize(&$controller){
		if(!empty($controller->params['admin'])){
			$controller->components += array('RequestHandler');
		}
	}
	function beforeRender(&$controller){
		if(!empty($controller->params['admin']) && $controller->name != 'CakeError'){
			if(!in_array($controller->RequestHandler->getClientIP(),$this->allowClients)){
				$controller->notFound();
			}
		}
	}
	
}

var_dump($controller->RequestHandler->getClientIP());