Block direct file access

2020-07-11 09:03:23 +01:00 · 2020-07-11 09:03:23 +01:00 · 7d8fc65ef0
parent 3d901ae5f9
commit 7d8fc65ef0
1 changed files with 6 additions and 0 deletions
--- a/app/img/wifi-qr-code.php
+++ b/app/img/wifi-qr-code.php
@ -4,6 +4,12 @@ require_once '../../includes/config.php';
 require_once '../../includes/defaults.php';
 require_once '../../includes/functions.php';

+// prevent direct file access
+if (!isset($_SERVER['HTTP_REFERER'])) {
+    header('HTTP/1.0 403 Forbidden');
+    exit;
+}
+
 function qr_encode($str)
 {
    return preg_replace('/(?<!\\\)([\":;,])/', '\\\\\1', $str);