From 81864b14b775cd9295e7a1a80cdd5c31fb218484 Mon Sep 17 00:00:00 2001 From: Paolo Date: Wed, 20 Sep 2017 12:00:07 +0200 Subject: [PATCH] Now by default the RESTful web services accept calls only from localhost (127.0.0.1) --- application/config/rest.php | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/application/config/rest.php b/application/config/rest.php index 1b6514abf..ec2d6f5ad 100644 --- a/application/config/rest.php +++ b/application/config/rest.php @@ -167,9 +167,9 @@ $config['auth_library_function'] = 'basicAuthentication'; | $config['auth_override_class_method']['accounts']['user'] = 'basic'; | $config['auth_override_class_method']['dashboard']['*'] = 'none|digest|basic'; | -| Here 'deals', 'accounts' and 'dashboard' are controller names, 'view', 'insert' and 'user' are methods within. - * An asterisk may also be used to specify an authentication method for an entire classes methods. - * Ex: $config['auth_override_class_method']['dashboard']['*'] = 'basic'; (NOTE: leave off the '_get' or '_post' from the end +| Here 'deals', 'accounts' and 'dashboard' are controller names, 'view', 'insert' and 'user' are methods within. + * An asterisk may also be used to specify an authentication method for an entire classes methods. + * Ex: $config['auth_override_class_method']['dashboard']['*'] = 'basic'; (NOTE: leave off the '_get' or '_post' from the end * of the method name) | Acceptable values are; 'none', 'digest' and 'basic'. | @@ -223,7 +223,7 @@ $config['auth_library_function'] = 'basicAuthentication'; | restrict certain methods to IPs in your whitelist | */ -$config['rest_ip_whitelist_enabled'] = FALSE; +$config['rest_ip_whitelist_enabled'] = TRUE; /* |-------------------------------------------------------------------------- @@ -238,7 +238,7 @@ $config['rest_ip_whitelist_enabled'] = FALSE; | 127.0.0.1 and 0.0.0.0 are allowed by default | */ -$config['rest_ip_whitelist'] = ''; +$config['rest_ip_whitelist'] = '127.0.0.1'; /* |--------------------------------------------------------------------------