From 87b3ba1458f9bfac31057a334414b65ef010c96a Mon Sep 17 00:00:00 2001
From: Till Brehm <tbrehm@ispconfig.org>
Date: Fri, 12 Jan 2018 19:27:32 +0100
Subject: [PATCH] Fixed #4912 Remote API call fails with IDS security error
---
interface/lib/app.inc.php | 2 +-
interface/web/remote/index.php | 2 ++
interface/web/remote/json.php | 2 ++
interface/web/remote/rest.php | 2 ++
4 files changed, 7 insertions(+), 1 deletion(-)
diff --git a/interface/lib/app.inc.php b/interface/lib/app.inc.php
index 1cc96e9c2e..12b7e9e922 100755
--- a/interface/lib/app.inc.php
+++ b/interface/lib/app.inc.php
@@ -342,7 +342,7 @@ $app = new app();
// load and enable PHP Intrusion Detection System (PHPIDS)
$ids_security_config = $app->getconf->get_security_config('ids');
-if(is_dir(ISPC_CLASS_PATH.'/IDS') && ($ids_security_config['ids_anon_enabled'] == 'yes' || $ids_security_config['ids_user_enabled'] == 'yes' || $ids_security_config['ids_admin_enabled'] == 'yes')) {
+if(is_dir(ISPC_CLASS_PATH.'/IDS') && !defined('REMOTE_API_CALL') && ($ids_security_config['ids_anon_enabled'] == 'yes' || $ids_security_config['ids_user_enabled'] == 'yes' || $ids_security_config['ids_admin_enabled'] == 'yes')) {
$app->uses('ids');
$app->ids->start();
}
diff --git a/interface/web/remote/index.php b/interface/web/remote/index.php
index 3e111394a3..670a9db13b 100644
--- a/interface/web/remote/index.php
+++ b/interface/web/remote/index.php
@@ -1,5 +1,7 @@
<?php
+define('REMOTE_API_CALL', true);
+
require_once '../../lib/config.inc.php';
$conf['start_session'] = false;
require_once '../../lib/app.inc.php';
diff --git a/interface/web/remote/json.php b/interface/web/remote/json.php
index 17bc41cd3b..926a995395 100644
--- a/interface/web/remote/json.php
+++ b/interface/web/remote/json.php
@@ -1,5 +1,7 @@
<?php
+define('REMOTE_API_CALL', true);
+
require_once '../../lib/config.inc.php';
$conf['start_session'] = false;
require_once '../../lib/app.inc.php';
diff --git a/interface/web/remote/rest.php b/interface/web/remote/rest.php
index 37db80d66b..d579150045 100644
--- a/interface/web/remote/rest.php
+++ b/interface/web/remote/rest.php
@@ -1,5 +1,7 @@
<?php
+define('REMOTE_API_CALL', true);
+
require_once '../../lib/config.inc.php';
$conf['start_session'] = false;
require_once '../../lib/app.inc.php';
--
GitLab