Popravek, da dovoli samo ajax request.

2021-12-04 14:41:36 +01:00 · 2021-12-04 14:41:36 +01:00 · ade45676f8
commit ade45676f8
parent 42bb95cf34
1 changed files with 7 additions and 0 deletions
--- a/frontend/drupal/sites/all/modules/nakupovanje_1ka/nakupovanje_1ka.module
+++ b/frontend/drupal/sites/all/modules/nakupovanje_1ka/nakupovanje_1ka.module
@ -237,6 +237,13 @@ function nakupovanje_1ka_menu()

 function nakupovanje_1ka_api()
 {
+  if(empty($_SERVER['HTTP_X_REQUESTED_WITH']) || strtolower($_SERVER['HTTP_X_REQUESTED_WITH']) != 'xmlhttprequest') {
+    header('Location: //1ka.si');
+    die();
+  }
+
+
+
  require($_SERVER['DOCUMENT_ROOT'] . '/settings.php');

  $api_url = $site_url . 'frontend/payments/api.php';