I'm developing a web-app which I want to block ip addresses not registered in my database. This web-app should not be accessible for all users, but the users (let's say) I register manually. The use case is like this:I create username and password for my client.They login(first login for the client)I get the client's machine ip or mac address(somehow)I store this unique address for the clientThen all next login attempts should come from the address I store, otherwise I block the attempt. Thus, it is not possible to login for other guys who know username and password(except my client of course). They also need to access on that machine.Do you think it makes sense? Do you have other suggestions?Use Case Example:Lets say, I'm a wholesaler and I have retail customers. I register one of my new retail customer with username and password and give them the credentials I created. They can easily login, logout... Assume that the new customer(who I don't truly trust) also deals with my competitor. If he gives the credentials to my competitor, they can see everything, stock status, prices, discounts of product and so on... Because of there are(could be) some customers who I don't trust so much, I have to protect the systems from my competitor.
How to block IP addresses using my web app
design