From: Florent Bruneau <florent.bruneau@polytechnique.org>
Date: Sun, 1 Jun 2008 15:10:26 +0000 (+0200)
Subject: Webservice whitelister.
X-Git-Url: http://git.polytechnique.org/?p=dotclear.git;a=commitdiff_plain;h=7e805ddd8e538230420d25e827d6eca4bff886ff

Webservice whitelister.

Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
---

diff --git a/page.webservice.php b/page.webservice.php
index e4783cb..919d130 100644
--- a/page.webservice.php
+++ b/page.webservice.php
@@ -3,7 +3,13 @@ require_once dirname(__FILE__) . '/widget.blog.owner.php';
 
 class XorgWebservice extends dcUrlHandlers {
   static private function canRunServices() {
-    return true;
+    $addrs = explode(',', XORG_SERV_ADDRS);
+    foreach ($addrs as $addr) {
+      if ($addr == $_SERVER['REMOTE_ADDR']) {
+        return true;
+      }
+    }
+    return false;
   }
 
   static public function handle($args) {