Forbid non-CLI access to command-line scripts

2020-09-07 05:51:26 -04:00
parent 3bd8b81154
commit 06632536f3
6 changed files with 29 additions and 0 deletions
--- a/bin/auth_ejabberd.php
+++ b/bin/auth_ejabberd.php
@@ -51,6 +51,11 @@
 *
 */

+if (php_sapi_name() !== 'cli') {
+	header($_SERVER["SERVER_PROTOCOL"] . ' 403 Forbidden');
+	exit();
+}
+
 use Dice\Dice;
 use Friendica\App\Mode;
 use Friendica\Util\ExAuth;