Is there any way that i can Restrict Check In & CheckOut Based on IP Address?

Frappe HR
1

Is there any way that i can Restrict Check In & CheckOut Based on IP Address?
I am using Cloudflare - and i want to whitelist only my office and some more ip to check-in and checkout.

Is there any way?

Thanks

2

Hi @ShaonPro:

Check this …

Hope this helps.

3

Can you tell me from where i can add this?
in details - that would be very helpful .

Thanks

4

image
image1849×845 73.7 KB

  1. First Go customize form and select employee doctype and add the custom field in that employee doctype

image
image1829×848 82.1 KB

after update that go to server script by searching

image
image1817×864 49.4 KB

after create server script and add the code in script and then save that and also set the allowed_checkin_ip for employee

1 Like
5

@avc Hey
don’t know but there is nothing showing up.

image
image1440×859 19.1 KB

6

Hi @ShaonPro

Try to refresh browser. If don’t works, open browser console and check if any error is shown. Share screenshot here

7

I have Updated the Script

image
image1452×735 41.6 KB

And Added these - also added IPs
But still user can check in from other ips

image
image1404×797 69.5 KB

8

Please Help

9

Hi @ShaonPro:

Allowed IP address should be informed on each employee document, not in “design”. Anyway, this method just works with one IP. It can be tuned to allow ip ranges, or a list of ips …

Or … try this

if frappe.request.headers.get('X-Forwarded-For'):
    ip_address = frappe.request.headers.get('X-Forwarded-For').split(',')[0]
else:
    ip_address = frappe.request.remote_addr

allowed_ips = ["103.72.212.29", "103.49.170.164"] # write here all your ips

if ip_address not in allowed_ips:
    frappe.throw("IP address not allowed")
10

i did these but still no luck.

11

@avc - User still can check in or out.

12

Hi @ShaonPro:

There are a lot of things that could be failing … show how your script is written now.
Share too how your doctype is customized, showing fieldname too.

13

Can’t you restrict the user login from unknown IPs?

14

Hi @Varun:

Since “unknown” is a valid identifier for “X-Forwarded-For”, it should works … the value is not on on the allowed ip addresses.

Hope this helps.