From ebe310d1dbdfd85bee5de503682dfb4e07f81597 Mon Sep 17 00:00:00 2001 From: Mcat12 Date: Wed, 21 Dec 2016 12:32:36 -0500 Subject: [PATCH] Correctly parse IPV4_ADDRESS in setupVars for CORS Often there's a `/24` at the end of the IP, so we need to ignore that. --- php/auth.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/php/auth.php b/php/auth.php index ab8904d7..1c8a4fe2 100644 --- a/php/auth.php +++ b/php/auth.php @@ -16,7 +16,7 @@ function log_and_die($message) { function check_cors() { $setupVars = parse_ini_file("/etc/pihole/setupVars.conf"); - $ipv4 = isset($setupVars["IPV4_ADDRESS"]) ? $setupVars["IPV4_ADDRESS"] : $_SERVER['SERVER_ADDR']; + $ipv4 = isset($setupVars["IPV4_ADDRESS"]) ? explode("/", $setupVars["IPV4_ADDRESS"])[0] : $_SERVER['SERVER_ADDR']; // Check CORS $AUTHORIZED_HOSTNAMES = array(