From b40ebe07e2a6304e9c0435cd6002fda553df36fb Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 7 Jan 2020 23:43:14 +0100
Subject: [PATCH] Allow whitelisting specific IP for /api/

---
 web/api/index.php | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/web/api/index.php b/web/api/index.php
index d8a5b9107..08f51fc9c 100644
--- a/web/api/index.php
+++ b/web/api/index.php
@@ -1,6 +1,18 @@
 <?php
 define('VESTA_CMD', '/usr/bin/sudo /usr/local/vesta/bin/');
-exit;
+
+$allowed_host=0;
+$check_file="/usr/local/vesta/conf_web/allow_ip_for_api.conf";
+if (file_exists($check_file)) {
+    $file_content=file($check_file);
+    if (is_array($file_content)) {
+        foreach ($file_content as $line) {
+            if (trim($line) == $_SERVER['REMOTE_ADDR']) {$allowed_host=1; break;}
+        }
+    }
+}
+if ($allowed_host == 0) exit;
+
 if (isset($_POST['user']) || isset($_POST['hash'])) {
 
     // Authentication