diff --git a/cgi-bin/speed.py b/cgi-bin/speed.py
index <HASH>..<HASH> 100644
--- a/cgi-bin/speed.py
+++ b/cgi-bin/speed.py
@@ -1,15 +1,17 @@
 #!c:/python33/python.exe
 # -*- coding: utf-8 -*-
 
-
+import os
 import cgi
 import time
 
 print('Content-type: text/html\n\n')
 
-
-fs = cgi.FieldStorage()
-src = fs['src'].value
-t0 = time.perf_counter()
-exec(src)
-print('CPython: %6.2f ms' % ((time.perf_counter() - t0) * 1000.0))
\ No newline at end of file
+if os.environ['REMOTE_ADDR']!='127.0.0.1':
+    print('forbidden access')
+else:
+    fs = cgi.FieldStorage()
+    src = fs['src'].value
+    t0 = time.perf_counter()
+    exec(src)
+    print('CPython: %6.2f ms' % ((time.perf_counter() - t0) * 1000.0))
\ No newline at end of file
Add test on REMOTE_ADDR in speed.py