Update index.js

index.js

@@ -9,10 +9,32 @@ function generateApiKey() {
     return Math.random().toString(36).substr(2, 16);
 }
 
+// Function to validate IP address format and ensure it's not a private or reserved IP
+function isValidIp(ip) {
+    // Regular expression to validate IPv4 format
+    const ipv4Regex = /^(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)$/;
+
+    if (!ipv4Regex.test(ip)) {
+        return false; // Invalid IP format
+    }
+
+    // Split the IP into octets
+    const octets = ip.split('.').map(Number);
+
+    // Check for private IP ranges
+    const isPrivateIp =
+        (octets[0] === 10) ||
+        (octets[0] === 172 && octets[1] >= 16 && octets[1] <= 31) ||
+        (octets[0] === 192 && octets[1] === 168) ||
+        (ip === '127.0.0.1'); // localhost
+
+    return !isPrivateIp; // Return true if IP is not private
+}
+
 app.get('/checkState', (req, res) => {
     const { ip } = req.query;
 
-    if (ip) {
+    if (ip && isValidIp(ip)) {
         const apiKey = generateApiKey();
 
         const sessionDir = path.join(__dirname, 'session', ip);