Is it possible to find out in PHP whether request is initiated from which device ?

@Sinnbeck is it too easy to tamper user agent ?? as my end users are layman so if it is too easy then i have to find out some other alternative

@rohansinghrawat If it that big an issue then you should make a native app instead of a browser app. So ask yourself, whats the worst that can happen if they sign in using chrome on linux?

@Sinnbeck actually i just want to user restrict from logging in my panel when they are trying from another devices so that they only can accesss our panel from specifc desktops which is i n our offices .

@rohansinghrawat Then only allow access using the office IP? But they can still use any computer in the office. So make sure only those specific desktops are allowed to access the internet in the office. Or put them on a different VLAN and run the site on an internal server

@Sinnbeck yes i was thinking the same but the office IP changes frequently as I dont have static IP

@rohansinghrawat Then host the server in house?

To make it clear. There is no way of knowing the device being used from a browser. That is a security measure.

Another idea. Wrap the website in an electron app and only install it on those computers

@Sinnbeck okay will try and thanks for your suggestions

@Snapey i just want to allow user login only from my provided devices

@rohansinghrawat

When a device connects, check if it has your 'authorised_device' cookie

If not, you could ask them something about the device, such as an asset number. If the device is verified, send them an authorised device cookie.

@Snapey okay this sounds helpful to me ... so let me implement once and thanks for suggesting me

@rohansinghrawat Just remember that I can easily use my personal pc and just give you the device ID of one of the desktop computers if I wanted :)

@Sinnbeck as cookie can be exposed right?

@rohansinghrawat Lets say I want to use my personal pc for some reason. I open the website and it asks for asset number.

you could ask them something about the device, such as an asset number.

So I walk over to one of those desktop pc's and note down its asset number, and go back to my own pc and type it in. Its a bit like a password system, where the passwords are written on post-its :)

@Sinnbeck i was thinking for some solution which is like let user login and during login ask them one code which is unique and only admin will provide him then once user login successfully i generate one cookie for that system and also in my backend i update that unique code so that it cant be used again only admin can access that code ... and this process continues for other users as well .... not the best approach but just thinkking out of box ...