mirrors/h5ai
1
0
Fork 0
mirror of https://github.com/lrsjng/h5ai.git synced 2025-05-24 20:14:37 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Switch API to react to POST only.

Browse source
This commit is contained in:
Lars Jung 2015-05-01 16:16:31 +02:00
parent 3360e4d167
commit af6c715a5b
3 changed files with 13 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

6
src/_h5ai/server/php/inc/class-api.php
View file

@ -16,7 +16,7 @@ class Api {
public function apply() { public function apply() {
$action = Util::use_request_param("action"); $action = Util::use_request_param("action");
Util::json_fail(100, "unsupported request", !in_array($action, $this->actions)); Util::json_fail(101, "unsupported action", !in_array($action, $this->actions));
$methodname = "on_${action}"; $methodname = "on_${action}";
$this->$methodname(); $this->$methodname();
@ -102,10 +102,6 @@ class Api {
$response["all_items"] = $this->app->get_all_items(); $response["all_items"] = $this->app->get_all_items();
} }
if (AS_ADMIN && count($_REQUEST)) {
$response["unused"] = $_REQUEST;
}
Util::json_exit($response); Util::json_exit($response);
} }

2
src/_h5ai/server/php/inc/class-bootstrap.php
View file

@ -7,7 +7,7 @@ class Bootstrap {
Bootstrap::setup(); Bootstrap::setup();
$app = new App(); $app = new App();
if (Util::has_request_param("action")) { if (Util::is_post_request()) {
$api = new Api($app); $api = new Api($app);
$api->apply(); $api->apply();
} else { } else {

16
src/_h5ai/server/php/inc/class-util.php
View file

@ -29,21 +29,27 @@ class Util {
} }
public static function is_post_request() {
return (strtolower($_SERVER['REQUEST_METHOD']) === 'post');
}
public static function has_request_param($key) { public static function has_request_param($key) {
return array_key_exists($key, $_REQUEST); return array_key_exists($key, $_POST);
} }
public static function use_request_param($key, $default = null) { public static function use_request_param($key, $default = null) {
if (!array_key_exists($key, $_REQUEST)) { if (!array_key_exists($key, $_POST)) {
Util::json_fail(101, "parameter '$key' is missing", $default === null); Util::json_fail(100, "parameter '$key' is missing", $default === null);
return $default; return $default;
} }
$value = $_REQUEST[$key]; $value = $_POST[$key];
unset($_REQUEST[$key]); unset($_POST[$key]);
return $value; return $value;
} }