nsinnovations/fusionpbx
2
0
Fork 0
mirror of https://github.com/fusionpbx/fusionpbx.git synced 2025-12-30 00:53:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add a check for domain and api cidr

Browse Source
This commit is contained in:
Mark Crane
2014-07-29 04:26:32 +00:00
parent 90a177c84a
commit 6e049535e1
2 changed files with 33 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

31
resources/pdo.php
View File

@@ -288,4 +288,35 @@ if ($db_type == "pgsql") {
$domain_uuid = uuid();
}
//check the domain cidr range
if (is_array($_SESSION['domain']["cidr"])) {
$found = false;
foreach($_SESSION['domain']["cidr"] as $cidr) {
if (check_cidr($cidr, $_SERVER['REMOTE_ADDR'])) {
$found = true;
break;
}
}
if (!$found) {
echo "access denied";
exit;
}
}
//check the api cidr range
if (is_array($_SESSION['api']["cidr"])) {
$found = false;
foreach($_SESSION['api']["cidr"] as $cidr) {
if (check_cidr($cidr, $_SERVER['REMOTE_ADDR'])) {
$found = true;
break;
}
}
if (!$found) {
unset ($_REQUEST['key']);
unset ($_POST['key']);
unset ($_GET['key']);
}
}
?>