Remove cidr from the pdo.php file.
This was an awkward place for this code so moved it into its own include.
This commit is contained in:
parent
ef5e5175c4
commit
750177a51d
|
|
@ -347,35 +347,4 @@ if ($db_type == "pgsql") {
|
||||||
$domain_uuid = uuid();
|
$domain_uuid = uuid();
|
||||||
}
|
}
|
||||||
|
|
||||||
//check the domain cidr range
|
|
||||||
if (isset($_SESSION['domain']["cidr"]) && !defined('STDIN')) {
|
|
||||||
$found = false;
|
|
||||||
foreach($_SESSION['domain']["cidr"] as $cidr) {
|
|
||||||
if (check_cidr($cidr, $_SERVER['REMOTE_ADDR'])) {
|
|
||||||
$found = true;
|
|
||||||
break;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
if (!$found) {
|
|
||||||
echo "access denied";
|
|
||||||
exit;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
//check the api cidr range
|
|
||||||
if (isset($_SESSION['api']["cidr"])) {
|
|
||||||
$found = false;
|
|
||||||
foreach($_SESSION['api']["cidr"] as $cidr) {
|
|
||||||
if (check_cidr($cidr, $_SERVER['REMOTE_ADDR'])) {
|
|
||||||
$found = true;
|
|
||||||
break;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
if (!$found) {
|
|
||||||
unset ($_REQUEST['key']);
|
|
||||||
unset ($_POST['key']);
|
|
||||||
unset ($_GET['key']);
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
?>
|
?>
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue