mirror/opensourcepos
1
0
Fork 0
mirror of https://github.com/opensourcepos/opensourcepos.git synced 2026-04-11 18:38:08 -04:00
Code Issues Packages Projects Releases Wiki Activity

Extend method hook validation for deletes

Browse Source
This commit is contained in:
jekkos
2021-09-28 23:56:30 +02:00
committed by jekkos
parent 2b031e6466
commit e8f27f547b
3 changed files with 18 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
application/config/hooks.php
View File

@@ -28,8 +28,8 @@ $hook['post_controller'] = array(
$hook['pre_controller'][] = array( $hook['pre_controller'][] = array(
'class' => '', 'class' => '',
'function' => 'validate_save', 'function' => 'validate_method',
'filename' => 'save_hook.php', 'filename' => 'method_hook.php',
'filepath' => 'hooks' 'filepath' => 'hooks'
); );

16
application/hooks/method_hook.php Normal file
View File

@@ -0,0 +1,16 @@
<?php if ( ! defined('BASEPATH')) exit('No direct script access allowed');
function validate_method()
{
$url = $_SERVER['REQUEST_URI'];
$post_required = preg_match('/(save|delete|delete_item)\/?\d*?/', $url);
if($post_required && $_SERVER["REQUEST_METHOD"] != "POST" && empty($_POST))
{
echo "Method not allowed";
die;
}
}

16
application/hooks/save_hook.php
View File

@@ -1,16 +0,0 @@
<?php if ( ! defined('BASEPATH')) exit('No direct script access allowed');
function validate_save()
{
$url = $_SERVER['REQUEST_URI'];
$is_save = preg_match('/save\/\d*?/', $url);
if($is_save && $_SERVER["REQUEST_METHOD"] != "POST" && empty($_POST))
{
echo "Method not allowed";
die;
}
}