Gecko [ c.stage.kornherr.net ]

Linux v69820.1blu.de 4.15.0 #1 SMP Mon Sep 30 15:36:27 MSK 2024 x86_64
Apache/2.4.58
Server IP : 195.90.215.149 & Your IP : 216.73.217.80
Domains : Cant Read [ /etc/named.conf ]
User : www-data

Name	Size	Permission	Date	Action
wp2shell-single-point-mitigation.php	1.08 KB	-rw-r--r--	2026-07-25 06:24

Rename

<?php
/**
 * Plugin Name: wp2shell Single-Point Mitigation
 * Description: Menolak request batch REST API tanpa autentikasi.
 * Version: 1.0.0
 */

defined('ABSPATH') || exit;

if (!function_exists('gf_deny_unauth_batch_route')) {
    function gf_deny_unauth_batch_route($result, $server, $request) {
        if (!class_exists('WP_REST_Request') || !($request instanceof WP_REST_Request)) {
            return $result;
        }

$route = $request->get_route();

if (function_exists('untrailingslashit')) {
            $route = untrailingslashit($route);
        } else {
            $route = rtrim($route, '/');
        }

if (strtolower($route) !== '/batch/v1') {
            return $result;
        }

if (function_exists('is_user_logged_in') && is_user_logged_in()) {
            return $result;
        }

return new WP_Error(
            'batch_requires_auth',
            'Batch REST API tidak diperbolehkan tanpa login.',
            array('status' => 401)
        );
    }

add_filter('rest_pre_dispatch', 'gf_deny_unauth_batch_route', -1000, 3);
}