|
@@ -14,7 +14,7 @@ umask(0000);
|
|
|
// This check prevents access to debug front controllers that are deployed by accident to production servers.
|
|
|
// Feel free to remove this, extend it, or make something more sophisticated.
|
|
|
if (isset($_SERVER['HTTP_CLIENT_IP'])
|
|
|
- || isset($_SERVER['HTTP_X_FORWARDED_FOR'])
|
|
|
+ // || isset($_SERVER['HTTP_X_FORWARDED_FOR'])
|
|
|
|| !(in_array(@$_SERVER['REMOTE_ADDR'], array('127.0.0.1', 'fe80::1', '::1')) || php_sapi_name() === 'cli-server')
|
|
|
) {
|
|
|
header('HTTP/1.0 403 Forbidden');
|