Beta [TylerAustin] XFRM: Device GPS Requirements 1.0.0 beta 2

This XF2 Add-on adds hardened location enforcement to XenForo Resource Manager by validating both browser GPS and IP country before downloads, purchases, and license renewals. Block globally banned countries, honor per-resource country restrictions, and optionally lock affected accounts until bans are lifted or admins unlock them. Includes strict mode to always require GPS and block on any IP/GPS mismatch, plus server-side protection (POST/AJAX/CSRF validation) to reduce client-side bypass attempts. Compatible with OzzModz country restriction setups and XFA RM Marketplace/Cart workflows.

Key Features

• Enforces country restrictions for XFRM resource downloads.
• Enforces country restrictions for resource purchases.
• Enforces country restrictions for RM Marketplace license renewals.
• Captures browser GPS location before protected actions.
• Resolves GPS coordinates to country code via reverse geocoding.
• Compares IP-derived country vs GPS-derived country.
• Supports global country bans (including OzzModz ban sources).
• Supports resource-level country bans (per-resource country list).
• Blocks actions with clear user-facing reason messages.
• Can disable download/purchase buttons when user is blocked.
• Admin option: master on/off switch for all enforcement.
• Admin option: ask browser consent to use device GPS.
• Admin options: require GPS per action (download / purchase / renew).
• Admin option: restrict purchases.
• Admin option: restrict renewals.
• Admin option: block when GPS is denied/unavailable/expired.
• Admin option: require IP/GPS country match.
• New strict mode option: always enforce IP/GPS match for download, purchase/cart, and renew.
• Strict mode forces GPS requirement for protected actions (even if normal GPS toggles are off).
• Strict mode blocks if IP country cannot be resolved.
• Strict mode blocks on any IP/GPS country mismatch.
• Account lock feature for globally banned countries.
• Auto-unlock feature when country ban is lifted.
• Manual admin override via unlock user ID list.
• Permission-based bypass support for trusted staff/admins.
• Server-side enforcement (not JS-only), covering controller actions directly.
• Hardened GPS capture endpoint with POST + AJAX + CSRF checks.
• Stores last IP country, last GPS country, and last geo-check timestamp for auditing.
• Configurable GPS cache age and lookup timeout.
• Configurable additional banned countries list.
• Compatibility hooks for OzzModz country restriction flows and XFA RM Marketplace/cart flows.

Copyright © 2021-2026 TylerAustin, GameNet. This item is not authorized for posting on xenforo.com and others web sites except under the xenforo account named GameNet, TylerAustin