Allow wget from own server only?

Distinguishing between internal and external traffic would require some custom coding, so it’s probably easier to just allow that particular pattern, or craft a more specific pattern that includes your domain name. For additional Pro questions, please visit Plugin Planet, where you can post in the forums or contact via contact form, thanks.

@12ax7: Or you could just set a proper User-Agent in wget. Problem solved. ??

@jeff: Determining if it’s internal isn’t too hard…usually just checking if the request is from the same IP C-block as the website IP will do the trick. (Given that you’ve got a good IP detection script that gets real IPs in cases of WAFs/proxies/etc.) Let me know if you think of a case where that wouldn’t work, or would cause an issue.

@scott: That’s the trick, finding a 100% reliable script for detecting true IP address in any environment. Then yes, it would be possible to compare IPs and allow all requests from the same server. Otherwise you risk disabling functionality for a small percentage of users. Not a risk I want to take, but I am open to checking out any scripts that claim 100% (or even 99.9%) IP-detecting accuracy.

@jeff: Exactly…I hear ya. I’ve looked at a lot of “true IP” scripts and each one I’ve seen has fallen short in some aspect. We’re working on a robust script for true IP address detection (that will fill in the gaps) to use with our WP-SpamShield plugin. Since it’s tough to find good scripts in that category, we’ll be happy to share once it’s finished, and will likely post on GitHub.

@scott: that sounds awesome, please drop me a line if/when you decide to share the script. You can reach me anytime via https://perishablepress.com/contact/

@jeff: Right on. Will do. ??