...} // try to check allowed (BUG: check the first cmd only): // XS_CMD_IMPORT_HEADER, XS_CMD_INDEX_REQUEST, XS_CMD_INDEX_REMOVE, XS_CMD_INDEX_EXDATA $first = ord(substr($data, 0, 1)); if ($first != XS_CMD_IMPORT_HEADER && $first != XS_CMD_INDEX_REQUEST && $first != XS_CMD_INDEX_...