Security: sphinx must listen only on localhost

In sphinx.conf, the line
port = 9312
must be replaced with
listen = 127.0.0.1:9312

otherwise, searchd is exposed to the world with its bare ass.

https://www.ads-software.com/extend/plugins/wordpress-sphinx-plugin/