yetangitu/PrivateBin
1
0
Fork 0
mirror of https://github.com/PrivateBin/PrivateBin.git synced 2025-10-05 18:34:20 +02:00
Code Issues Projects Releases Packages Wiki Activity

Merge branch 'master' of https://github.com/stevenandres/PrivateBin into stevenandres-master

Browse source
This commit is contained in:
El RIDO 2022-02-20 08:44:09 +01:00
commit d764c03759
No known key found for this signature in database
GPG key ID: 0F5C940A6BD81F92
3 changed files with 24 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

18
lib/Controller.php
View file

@ -195,6 +195,24 @@ class Controller
*/
private function _create()
{
// Check if whitelist feature is enabled
if (($option = $this->_conf->getKey('whitelist_paste_creation', 'traffic')) !== null) {
// Parse whitelist into array
$whitelist = explode(',', $option);
// Check for source IP in HTTP header
if (($option = $this->_conf->getKey('header', 'traffic')) !== null) {
$httpHeader = 'HTTP_' . $option;
// Grab source IP from HTTP header (if it exists)
if (array_key_exists($httpHeader, $_SERVER) && !empty($_SERVER[$httpHeader])) {
// Check if source IP reported from HTTP header is in whitelist array
if (!in_array($_SERVER[$httpHeader], $whitelist)) {
$this->_return_message(1, I18n::_('Your IP is not authorized to create pastes.'));
return;
}
}
}
}
// Ensure last paste from visitors IP address was more than configured amount of seconds ago.
ServerSalt::setStore($this->_model->getStore());
TrafficLimiter::setConfiguration($this->_conf);