/ 
CGI-ACL-0.06
River stage zero No dependents
⭐ Starred 0 GitHub stars
/ CGI::ACL

NAME

CGI::ACL - Decide whether to allow a client to run this script

VERSION

Version 0.06

SYNOPSIS

Does what it says on the tin, providing control client access to a CGI script based on IP addresses and geographical location (countries).

use CGI::Lingua;
use CGI::ACL;

my $acl = CGI::ACL->new();
# ...
my $denied = $acl->all_denied(info => CGI::Lingua->new(supported => 'en'));

The module optionally integrates with CGI::Lingua for detecting the client's country.

SUBROUTINES/METHODS

new

Creates an instance of the CGI::ACL class. Handles both hash and hashref arguments. Includes basic error handling for invalid arguments.

my $acl = CGI::ACL->new(allowed_ips => { '127.0.0.1' => 1 });

allow_ip

Give an IP (or CIDR block) that we allow to connect to us.

use CGI::ACL;

# Allow Google to connect to us
my $acl = CGI::ACL->new()->allow_ip(ip => '8.35.80.39');

deny_country

Give a country, or a reference to a list of countries, that we will not allow to access us

use CGI::ACL;

# Don't allow the UK to connect to us
my $acl = CGI::ACL->new()->deny_country('GB');

# Don't allow any countries to connect to us (a sort of 'default deny')
my $acl = CGI::ACL->new()->deny_country('*');

allow_country

Give a country, or a reference to a list of countries, that we will allow to access us, overriding the deny list if needed.

use CGI::ACL;

# Allow only the UK and US to connect to us
my @allow_list = ('GB', 'US');
my $acl = CGI::ACL->new()->deny_country('*')->allow_country(country => \@allow_list);

all_denied

Evaluates all restrictions (IP and country) and determines if access is denied.

If any of the restrictions return false then return false, which should allow access. Access is allowed by default if no restrictions are set, however as soon as any restriction is set you may find you need to explicitly allow access. Note, therefore, that by default localhost isn't allowed access, call allow_ip('127.0.0.1') to enable it.

    use CGI::Lingua;
    use CGI::ACL;

    # Allow Google to connect to us
    my $acl = CGI::ACL->new()->allow_ip(ip => '8.35.80.39');

    if($acl->all_denied()) {
    	print 'You are not allowed to view this site';
	return;
    }

    $acl = CGI::ACL->new()->deny_country(country => 'br');

    if($acl->all_denied(lingua => CGI::Lingua->new(supported => ['en']))) {
    	print 'Brazilians cannot view this site for now';
	return;
    }

deny_cloud

Enables blocking of requests originating from major cloud-hosting providers such as Amazon Web Services (AWS), Google Cloud Platform (GCP), Microsoft Azure, DigitalOcean, Linode, Hetzner, and OVH.

This method relies on verified reverse DNS lookups to classify the client's network origin. A reverse DNS lookup is performed on the client's IP address, and the resulting hostname is then forward-confirmed to ensure that it is not spoofed. If the hostname matches known patterns associated with cloud infrastructure providers, access is denied.

This feature is useful for preventing automated bots, scrapers, and abusive traffic commonly launched from cloud environments, while still allowing access from residential and business networks.

use CGI::ACL;

my $acl = CGI::ACL->new()->deny_cloud();

if($acl->all_denied()) {
    print "Access from cloud-hosted systems is not permitted.";
    exit;
}

Returns the object instance to allow method chaining.

AUTHOR

Nigel Horne, <njh at nigelhorne.com>

BUGS

Please report any bugs or feature requests to bug-cgi-acl at rt.cpan.org, or through the web interface at http://rt.cpan.org/NoAuth/ReportBug.html?Queue=CGI-ACL. I will be notified, and then you'll automatically be notified of progress on your bug as I make changes.

A VPN or proxy would most likely bypass the IP-based access control.

SEE ALSO

CGI::Lingua

SUPPORT

You can find documentation for this module with the perldoc command.

perldoc CGI::ACL

You can also look for information at:

LICENSE AND COPYRIGHT

Copyright 2017-2026 Nigel Horne.

This program is released under the following licence: GPL2