Differences

This shows you the differences between two versions of the page.

--- global_admin [2026/10/20 17:27] – Synchronize English documentation with canonical Russian pages; reviewed locally 2026-10-20 user
+++ global_admin [2026/11/04 14:16] (current) – Documentation: restrict Global Admin exchange by server IP admin
@@ Line 9: / Line 9: @@
 . Go to Global Admin > Sites > Add Site
 . Enter the site's password (found in Settings > CJSettings > SiteInfo > Smart Exchange password)
-. Optionally enter a Custom URL for quick access (such as a direct link to that site's LinkExchange admin)
+. Optionally enter a Custom URL for quick access (such as a link to an external rotator or that site's LinkExchange admin)
+Use the site's Smart Exchange password, rather than the password for its admin interface.
 Once sites are added, you can view combined statistics. Go to Global Admin > Stats, select the sites you want to monitor (or all of them), and view aggregated data.
@@ Line 17: / Line 19: @@
 Below the statistics is a Sync Data section that lets you synchronize data between sites in your network. For CJ Settings, all data syncs except for personal information like title, description, MainPage, and Smart Exchange password.
+===== Restricting exchange access by IP =====
+You can restrict Global Admin exchange to your own servers' IP addresses. On each site that receives exchange requests, open **Settings - CJSettings - Admin Area** and fill in **Limit access to scj_ex.php (Global Admin exchange) by IP**.
+Enter the IP addresses of the servers that use Global Admin to connect to this site, separated by commas. You can use individual addresses and CIDR networks. For example:
+<code>
+.0.113.10,198.51.100.0/24
+</code>
+This example allows exchange requests from 203.0.113.10 and addresses in the 198.51.100.0/24 network. Replace these with your own addresses. Use the outgoing server IP seen by the receiving site, rather than your browser's IP. If your sites exchange requests in both directions, configure the list on each site.
+Leaving the field empty removes the IP restriction. **The Smart Exchange password is still required**, even for allowed IP addresses. The adjacent **Limit access to admin area by IP** setting is separate: it restricts access to the admin interface, while this option controls Global Admin exchange through scj_ex.php.
+If the sending server's IP is not on the list, its exchange request is rejected with HTTP 403; the API returns ''ip_not_allowed''. Check the server's outgoing IP and the list on the receiving site.
 ===== GA: Sync data =====