From 313af9b14257e7ee81a401e61be28751c523d426 Mon Sep 17 00:00:00 2001
From: Sylvain Berfini <sylvain.berfini@belledonne-communications.com>
Date: Mon, 8 Jul 2019 11:18:36 +0200
Subject: [PATCH] Restrict access to xmlrpc.php file

---
 httpd/flexisip-account-manager.conf | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/httpd/flexisip-account-manager.conf b/httpd/flexisip-account-manager.conf
index 78367f5..acf348a 100644
--- a/httpd/flexisip-account-manager.conf
+++ b/httpd/flexisip-account-manager.conf
@@ -2,5 +2,12 @@ Alias /flexisip-account-manager /opt/belledonne-communications/share/flexisip-ac
 <Directory /opt/belledonne-communications/share/flexisip-account-manager/xmlrpc/>
 	Options FollowSymLinks MultiViews
 	AllowOverride None
-	Require all granted
+	Require all denied
+
+	<Files xmlrpc.php>
+		<RequireAll>
+			Require all granted
+			Require not env blockAccess
+		</RequireAll>
+	</Files>
 </Directory>