|
|
|
@ -14,7 +14,7 @@ umask(0000); |
|
|
|
|
// This check prevents access to debug front controllers that are deployed by accident to production servers. |
|
|
|
|
// Feel free to remove this, extend it, or make something more sophisticated. |
|
|
|
|
if (isset($_SERVER['HTTP_CLIENT_IP']) |
|
|
|
|
|| isset($_SERVER['HTTP_X_FORWARDED_FOR']) |
|
|
|
|
// || isset($_SERVER['HTTP_X_FORWARDED_FOR']) |
|
|
|
|
|| !(in_array(@$_SERVER['REMOTE_ADDR'], array('127.0.0.1', 'fe80::1', '::1')) || php_sapi_name() === 'cli-server') |
|
|
|
|
) { |
|
|
|
|
header('HTTP/1.0 403 Forbidden'); |
|
|
|
|