Original release 20150729

[fex.git] / cgi-bin / fur

diff --git a/cgi-bin/fur b/cgi-bin/fur
index 94f6a1e4af831b541fcb5ce8fa60d87a3209d9a4..2a7544526a9035a5b4dc970f9d3cd9ef33dc4a7a 100755 (executable)
--- a/cgi-bin/fur
+++ b/cgi-bin/fur
@@ -39,13 +39,20 @@ my $user = my $id = my $verify = '';
 
 &check_maint;
 
-unless (@local_domains or @local_rdomains) {
+unless (@local_domains and @local_rdomains) {
   html_error($error,
     "No domains for registrations are defined.",
     "Contact $ENV{SERVER_ADMIN} for details."
   );
 }
 
+unless (@local_hosts and ipin($ENV{REMOTE_ADDR}||0,@local_hosts)) {
+  html_error($error,
+    "Registrations from your host ($ENV{REMOTE_ADDR}) are not allowed.",
+    "Contact $ENV{SERVER_ADMIN} for details."
+  );
+}
+
 # look for CGI parameters
 our %PARAM;
 &parse_parameters;