web/app_dev.php line 72

Open in your IDE?
  1. <?php
  3. use Symfony\Component\HttpFoundation\Request;
  4. use Symfony\Component\Debug\Debug;
  6. // If you don't want to setup permissions the proper way, just uncomment the following PHP line
  7. // read http://symfony.com/doc/current/setup.html#checking-symfony-application-configuration-and-setup
  8. // for more information
  9. //umask(0000);
  11. // This check prevents access to debug front controllers that are deployed by accident to production servers.
  12. // Feel free to remove this, extend it, or make something more sophisticated.
  13. // if (isset($_SERVER['HTTP_CLIENT_IP'])
  14. //     || isset($_SERVER['HTTP_X_FORWARDED_FOR'])
  15. //     || !(in_array(@$_SERVER['REMOTE_ADDR'], ['127.0.0.1', '::1']) || php_sapi_name() === 'cli-server')
  16. // ) {
  17. //     header('HTTP/1.0 403 Forbidden');
  18. //     exit('You are not allowed to access this file. Check '.basename(__FILE__).' for more information.');
  19. // }
  21. require __DIR__ . '/../vendor/autoload.php';
  22. Debug::enable();
  24. $kernel = new AppKernel('dev', true);
  25. if (PHP_VERSION_ID < 70000) {
  26.     $kernel->loadClassCache();
  27. }
  28. $request = Request::createFromGlobals();
  30. /*
  31.  * Enable one of trusted proxy configurations below
  32.  *
  33.  * This tells Symfony Router to trust `X-Forwarded-*` headers from reverse proxies in front of it (e.g. Varnish). If
  34.  * this is not configured properly for the respective environment, the Router will ignore the headers and e.g. generate
  35.  * http-only links (ignoring `X-Forwarded-Proto` header that indicates that website uses https).
  36.  *
  37.  * See:
  38.  *
  39.  * - https://symfony.com/blog/fixing-the-trusted-proxies-configuration-for-symfony-3-3
  40.  * - https://stackoverflow.com/a/50110665/282325
  41.  */
  42. $dockerIpRanges = [
  43.     '127.0.0.1',
  44.     '10.0.0.0/8',
  45.     '172.16.0.0/12',
  46.     '192.168.0.0/16',
  47. ];
  48. $zutomIpRanges = [
  49.     '127.0.0.1',
  50. ];
  51. $cloudflareIpRanges = [
  52.     // https://www.cloudflare.com/ips/
  53.     '103.21.244.0/22',
  54.     '103.22.200.0/22',
  55.     '103.31.4.0/22',
  56.     '104.16.0.0/12',
  57.     '108.162.192.0/18',
  58.     '131.0.72.0/22',
  59.     '141.101.64.0/18',
  60.     '162.158.0.0/15',
  61.     '172.64.0.0/13',
  62.     '173.245.48.0/20',
  63.     '188.114.96.0/20',
  64.     '190.93.240.0/20',
  65.     '197.234.240.0/22',
  66.     '198.41.128.0/17',
  67. ];
  68. // Request::setTrustedProxies(array_merge($dockerIpRanges), Request::HEADER_X_FORWARDED_ALL); // docker
  69. Request::setTrustedProxies(array_merge($zutomIpRanges), Request::HEADER_X_FORWARDED_ALL); // Zutom PROD not behind Cloudflare
  70. // Request::setTrustedProxies(array_merge($zutomIpRanges, $cloudflareIpRanges), Request::HEADER_X_FORWARDED_ALL); // Zutom PROD behind Cloudflare
  72. $response = $kernel->handle($request);
  73. $response->send();
  74. $kernel->terminate($request, $response);