Forum Moderators: open
If you want to enable your users to access corporate information *only* from within the lan, then checking of location should only be done on the server iself and never ever at all be done in the clients browser!
If you place your check on the client browser you'll get hacked within 5 seconds or less! It's so simple to do that that it's ridiculous:
1) save the complete page with all files to the HD (Mozilla will do this for you)
2) modify the checking javascript code so that it thinks it's always on the LAN
3) modify clickable links to be absolute links
4) load the page in the brower and you are inside!