fergalmoran/mailcow-dockerized
1
0
Fork 0
mirror of https://github.com/fergalmoran/mailcow-dockerized.git synced 2025-12-22 09:27:30 +00:00
Code Issues Packages Projects Releases Wiki Activity

[Web] secure container_ctrl.php

Browse Source
This commit is contained in:
FreddleSpl0it
2024-04-04 16:30:35 +02:00
parent 7660ca89ae
commit b37caaf9e5
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
data/web/inc/ajax/container_ctrl.php
View File

@@ -1,4 +1,11 @@
<?php <?php
// Block requests by checking the 'Sec-Fetch-Dest' header.
if (isset($_SERVER['HTTP_SEC_FETCH_DEST']) && $_SERVER['HTTP_SEC_FETCH_DEST'] !== 'empty') {
header('HTTP/1.1 403 Forbidden');
exit;
}
require_once $_SERVER['DOCUMENT_ROOT'] . '/inc/prerequisites.inc.php'; require_once $_SERVER['DOCUMENT_ROOT'] . '/inc/prerequisites.inc.php';
if (!isset($_SESSION['mailcow_cc_role']) || $_SESSION['mailcow_cc_role'] != 'admin') { if (!isset($_SESSION['mailcow_cc_role']) || $_SESSION['mailcow_cc_role'] != 'admin') {
exit(); exit();