Tor node detection on internal API gateway interface.

Author: nthnn

side/account.php

@@ -31,10 +31,16 @@
 
 include_once("../controller/account.php");
 include_once("../controller/db_config.php");
-include_once("../controller/session_ctrl.php");
 include_once("../controller/response.php");
+include_once("../controller/session_ctrl.php");
+include_once("../controller/tor_detection.php");
 include_once("../controller/validator.php");
 
+if(TorDetection::isExitNode()) {
+    http_response_code(403);
+    return;
+}
+
 if(isset($_GET["login"]) && empty($_GET["login"]) &&
     isset($_POST["username"]) && !empty($_POST["username"]) &&
     isset($_POST["password"]) && !empty($_POST["password"])) {

side/apps.php

@@ -32,10 +32,16 @@
 include_once("../controller/account.php");
 include_once("../controller/apps.php");
 include_once("../controller/db_config.php");
-include_once("../controller/session_ctrl.php");
 include_once("../controller/response.php");
+include_once("../controller/session_ctrl.php");
+include_once("../controller/tor_detection.php");
 include_once("../controller/validator.php");
 
+if(TorDetection::isExitNode()) {
+    http_response_code(403);
+    return;
+}
+
 if(!(isset($_COOKIE["sess_id"]) &&
     !empty($_COOKIE["sess_id"]) &&
     SessionControl::validate($_COOKIE["sess_id"]))) {

side/forgetpass.php

@@ -31,11 +31,17 @@
 
 include_once("../controller/db_config.php");
 include_once("../controller/response.php");
+include_once("../controller/tor_detection.php");
 include_once("../controller/validator.php");
 
-global $db_conn;
+if(TorDetection::isExitNode()) {
+    http_response_code(403);
+    return;
+}
 
+global $db_conn;
 Response::jsonContent();
+
 if(!(isset($_SERVER["REQUEST_METHOD"]) && $_SERVER["REQUEST_METHOD"] === "POST")) {
     Response::failed();
     return;

side/settings.php

@@ -31,10 +31,16 @@
 
 include_once("../controller/apps.php");
 include_once("../controller/db_config.php");
-include_once("../controller/session_ctrl.php");
 include_once("../controller/response.php");
+include_once("../controller/session_ctrl.php");
+include_once("../controller/tor_detection.php");
 include_once("../controller/validator.php");
 
+if(TorDetection::isExitNode()) {
+    http_response_code(403);
+    return;
+}
+
 if(!(isset($_COOKIE["sess_id"]) &&
     !empty($_COOKIE["sess_id"]) &&
     SessionControl::validate($_COOKIE["sess_id"]))) {