One of the options of access control is ‘ip’ (check the docs/google, I’ve seen it somewhere.) As for sending a message. Without knowing there email, the only way the ‘send’ a message would be Yii::app()->user->setFlash(). If you do have an email address, look at the contact form code, it should give you an idea on how to send one.