fixes #3: disable host check via env added

therohitdas · Jan 30, 2022 · 3ef1f0a · 3ef1f0a
1 parent ac97fa1
commit 3ef1f0a
Showing 1 changed file with 6 additions and 3 deletions.
diff --git a/image.php b/image.php
@@ -9,6 +9,7 @@
 $allowed_hosts = getenv("ALLOWED_HOST");
 $allowed_hosts = strtolower($allowed_hosts);
 $allowed_hosts = explode(",", $allowed_hosts);
+$disable_host_check = getenv("DISABLE_HOST_CHECK") === "true";
 
 if (array_key_exists('HTTP_ORIGIN', $_SERVER)) {
     $origin = $_SERVER['HTTP_ORIGIN'];
@@ -86,9 +87,11 @@
 }
 elseif ($_SERVER["REQUEST_METHOD"] == "GET") {
     // allowed host check
-    if ($origin !== false && (!in_array($origin, $allowed_hosts))) {
-        echo json_encode(array("error" => "Unauthorized"));
-        die();
+    if (!$disable_host_check){
+        if ($origin !== false && (!in_array($origin, $allowed_hosts))) {
+            echo json_encode(array("error" => "Unauthorized"));
+            die();
+        }
     }
     if (isset($_GET["id"]) && strlen($_GET["id"]) <= 10) {
         if ($imageUploader->exists($_GET["id"])) {