| @@ -628,8 +628,13 @@ | ||
| 628 | 628 | */ |
| 629 | 629 | |
| 630 | 630 | /* telecom credit */ |
| 631 | 631 | } elseif ( isset( $_REQUEST['clientip'] ) && isset( $_REQUEST['sendid'] ) && isset( $_REQUEST['rel'] ) ) { |
| 632 | + $acting_clientip = ( isset( $usces->options['acting_settings']['telecom']['clientip'] ) ) ? (string) $usces->options['acting_settings']['telecom']['clientip'] : ''; | |
| 633 | + if ( '' === $acting_clientip || (string) wp_unslash( $_REQUEST['clientip'] ) !== $acting_clientip ) { | |
| 634 | + /* 設定済みクライアントIPと一致しない通知は正規のものではないため記録せず終了 */ | |
| 635 | + die( 'SuccessOK' ); | |
| 636 | + } | |
| 632 | 637 | $data = array(); |
| 633 | 638 | foreach ( $_REQUEST as $key => $value ) { |
| 634 | 639 | $data[ $key ] = $value; |
| 635 | 640 | } |
