IT4Change/gradido
3
0
Fork 0
mirror of https://github.com/IT4Change/gradido.git synced 2025-12-13 07:45:54 +00:00
Code Issues Packages Projects Releases Wiki Activity

make better debugging output by csfr error

Browse Source
This commit is contained in:
einhornimmond 2021-02-24 18:35:00 +01:00 committed by Ulf Gebhardt
parent 61c4279035
commit a38f2d67ae
No known key found for this signature in database
GPG Key ID: 81308EFE29ABFEBD
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
config/routes.php
View File

@ -69,14 +69,18 @@ Router::scope('/', function (RouteBuilder $routes) {
return true; return true;
} }
$allowedCaller = Configure::read('API.allowedCaller'); $allowedCaller = Configure::read('API.allowedCaller');
$ipPerHost = [];
if($allowedCaller && count($allowedCaller) > 0) { if($allowedCaller && count($allowedCaller) > 0) {
$callerIp = $request->clientIp(); $callerIp = $request->clientIp();
foreach($allowedCaller as $allowed) { foreach($allowedCaller as $allowed) {
$ip = gethostbyname($allowed); $ip = gethostbyname($allowed);
$ipPerHost[$allowed] = $ip;
if($ip === $callerIp) return true; if($ip === $callerIp) return true;
} }
die("caller ip: $callerIp<br>"); //die("caller ip: $callerIp<br>");
} }
//var_dump(['caller_ip' => $callerIp, 'ips' => $ipPerHost]);
die(json_encode(['state' => 'error', 'details' => ['caller_ip' => $callerIp, 'ips' => $ipPerHost]]));
} }
} }
// disable csfr for all ajax requests in ajax whitelisted controller // disable csfr for all ajax requests in ajax whitelisted controller