Gecko [ v3.cesa.co.za ]

Linux cesa-www-main 6.1.0-49-cloud-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.174-1 (2026-05-26) x86_64
Apache/2.4.68 (Debian)
Server IP : 10.218.0.2 & Your IP : 216.73.217.117
Domains : Cant Read [ /etc/named.conf ]
User : www-data

Name	Size	Permission	Date	Action
.htaccess	237 B	-r-xr-xr-x	2026-08-17 03:12
CesaMainExternalCaller.php	1.75 KB	-rwxrwxr-x	2026-05-20 09:05

Rename

<?php

namespace App\MemberBundle\Http;

use Symfony\Component\HttpFoundation\Request;

/**
 * IP whitelist checks for server-to-server calls from cesa-main / WordPress host.
 * Mirrors {@see \App\ContentBundle\Controller\ExternalFormApiController}.
 */
final class CesaMainExternalCaller
{
    public static function getAllowedIpsCsv(Request $request): string
    {
        return (string) (
            $_ENV['CESA_MAIN_ALLOWED_IPS']
            ?? $_SERVER['CESA_MAIN_ALLOWED_IPS']
            ?? getenv('CESA_MAIN_ALLOWED_IPS')
            ?? ''
        );
    }

public static function isAuthorised(Request $request, ?string $allowedIpsCsv = null): bool
    {
        $allowedIpsCsv ??= self::getAllowedIpsCsv($request);
        if (trim($allowedIpsCsv) === '') {
            return false;
        }

$allowedIps = [];
        foreach (explode(',', $allowedIpsCsv) as $ip) {
            $ip = trim((string) $ip);
            if ($ip !== '') {
                $allowedIps[] = $ip;
            }
        }

$remoteAddr = (string) $request->server->get('REMOTE_ADDR', '');
        $forwardedFor = (string) $request->server->get('HTTP_X_FORWARDED_FOR', '');
        $candidateIps = [];

if ($forwardedFor !== '') {
            foreach (explode(',', $forwardedFor) as $forwardedIp) {
                $forwardedIp = trim((string) $forwardedIp);
                if ($forwardedIp !== '') {
                    $candidateIps[] = $forwardedIp;
                }
            }
        }

if ($remoteAddr !== '') {
            $candidateIps[] = $remoteAddr;
        }

foreach ($candidateIps as $candidateIp) {
            if (\in_array($candidateIp, $allowedIps, true)) {
                return true;
            }
        }

return false;
    }
}