fanbinit/rhymix
1
0
Fork 0
mirror of https://github.com/Lastorder-DC/rhymix.git synced 2026-01-07 18:51:41 +09:00
Code Issues Projects Releases Packages Wiki Activity

Fix open redirect in ncenterlite module

Browse source
This commit is contained in:
Kijin Sung 2018-10-11 09:27:26 +09:00
parent 05df47f4e1
commit 290ee0974d
3 changed files with 49 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

25
modules/ncenterlite/ncenterlite.model.php
View file

@ -188,7 +188,7 @@ class ncenterliteModel extends ncenterlite
{
$v->text = $this->getNotificationText($v);
$v->ago = $this->getAgo($v->regdate);
$v->url = getUrl('','act','procNcenterliteRedirect', 'notify', $v->notify, 'url', $v->target_url);
$v->url = getUrl('','act','procNcenterliteRedirect', 'notify', $v->notify);
if($v->target_member_srl)
{
$profileImage = $oMemberModel->getProfileImage($v->target_member_srl);
@ -405,6 +405,29 @@ class ncenterliteModel extends ncenterlite
$this->add('colorset_list', $colorsets);
}
/**
* Get information about a single notification.
*
* @param string $notify
* @param int $member_srl
* @return object|false
*/
public function getNotification($notify, $member_srl)
{
$args = new stdClass;
$args->notify = $notify;
$args->member_srl = $member_srl;
$output = executeQuery('ncenterlite.getNotify', $args);
if ($output->toBool() && $output->data)
{
return $output->data;
}
else
{
return false;
}
}
/**
* Return the notification text.
*