Web access program?

[Xedafen]

I am new to php and mysql, so maybe someone could help me with this. I want to make an application that when ran, it launches a web page. I can do that. However, I want only the people who downloaded the program to be able to access this part of my website. So, my problem is, how can I make it so when a person tries to access the website without the program installed, it wont give them access, but if they do have it installed and they launch it will give them access. Is this possible? Any help?


Extra info: I am using Savant as a web server application, and my website is being run off a .onion domain. Also, i am running it on my own computer.

[Kulverstukas]

This is an interesting problem. Maybe you could open that website only through the program, this program would generate a valid access token and pass it to that website, this way the website would know this person came through a program and has it installed.

Another method could be to install the program and have it run as a service, having it connect to the server backend and establish a connection. Server would mark this IP and allow it to pass through - the program would need to run all the time...

[Xedafen]

Thank you. I will look into this more deeply based on what you said.

[HTH]

Look into some google authenticator stuff. Where the program on your computer generates a key based on some unique but viewable property (could even be external up address) then the user passes it to the website. Once it does you could whitelist that ip for x hours, or x days even.

I realize that is very similar to what kulver mentioned, but i thought the google auth might help for ideas

[Xedafen]

Look into some google authenticator stuff. Where the program on your computer generates a key based on some unique but viewable property (could even be external up address) then the user passes it to the website. Once it does you could whitelist that ip for x hours, or x days even.

I realize that is very similar to what kulver mentioned, but i thought the google auth might help for ideas

Would this work do you think?

Code: (php) [Select]

if($_SERVER['HTTP_USER_AGENT'] == "MyApp") {// Web page here

}
else{ // its not requesting from your app
 // redirects to another page if they dont have the app
}

[Kulverstukas]

It would not work, User-agent is for the browser, so it would seem that the website was requested without the program each time. What you want is send some parameter/token with the header.