[FEATURE] Add check ip_nopassword in challenge_upload function

[jirafeau.git] / lib / functions.php

diff --git a/lib/functions.php b/lib/functions.php
index cf6b913c53e5ec1fd50049210de158f45aa0e17e..2817aa1e241b543ab782dc20ed7669e3172182c5 100644 (file)
--- a/lib/functions.php
+++ b/lib/functions.php
@@ -1108,6 +1108,21 @@ function jirafeau_challenge_upload ($cfg, $ip, $password)
         return true;
     }
 
+    // Allow if ip is in array (no password)
+    foreach ($cfg['upload_ip_nopassword'] as $i) {
+        if ($i == $ip) {
+            return true;
+        }
+        // CIDR test for IPv4 only.
+        if (strpos ($i, '/') !== false)
+        {
+            list ($subnet, $mask) = explode('/', $i);
+            if ((ip2long ($ip) & ~((1 << (32 - $mask)) - 1) ) == ip2long ($subnet)) {
+                return true;
+            }
+        }
+    }
+
     // Allow if ip is in array
     foreach ($cfg['upload_ip'] as $i) {
         if ($i == $ip) {