make better debugging output by csfr error

This commit is contained in:
einhornimmond 2021-02-24 18:35:00 +01:00 committed by Ulf Gebhardt
parent 61c4279035
commit a38f2d67ae
No known key found for this signature in database
GPG Key ID: 81308EFE29ABFEBD

View File

@ -69,14 +69,18 @@ Router::scope('/', function (RouteBuilder $routes) {
return true;
}
$allowedCaller = Configure::read('API.allowedCaller');
$ipPerHost = [];
if($allowedCaller && count($allowedCaller) > 0) {
$callerIp = $request->clientIp();
foreach($allowedCaller as $allowed) {
$ip = gethostbyname($allowed);
$ipPerHost[$allowed] = $ip;
if($ip === $callerIp) return true;
}
die("caller ip: $callerIp<br>");
//die("caller ip: $callerIp<br>");
}
//var_dump(['caller_ip' => $callerIp, 'ips' => $ipPerHost]);
die(json_encode(['state' => 'error', 'details' => ['caller_ip' => $callerIp, 'ips' => $ipPerHost]]));
}
}
// disable csfr for all ajax requests in ajax whitelisted controller