From 5f9110802190163c0866204855863cfa9bd5f9e1 Mon Sep 17 00:00:00 2001
From: zero <skklove@gmail.com>
Date: Mon, 28 May 2007 08:14:54 +0000
Subject: [PATCH] git-svn-id: http://xe-core.googlecode.com/svn/trunk@1488
 201d5d3c-b55e-5fd7-737f-ddc643e51545

---
 addons/blogapi/blogapi.addon.php     | 10 +++++++---
 modules/member/member.controller.php |  2 +-
 modules/member/member.model.php      |  1 +
 3 files changed, 9 insertions(+), 4 deletions(-)

diff --git a/addons/blogapi/blogapi.addon.php b/addons/blogapi/blogapi.addon.php
index 55016f4b7..59510b6f6 100644
--- a/addons/blogapi/blogapi.addon.php
+++ b/addons/blogapi/blogapi.addon.php
@@ -25,9 +25,8 @@
     if($params && !is_array($params)) $params = array($params);
 
     // user_id, password를 구해서 로그인 시도
-    $appkey = $params[0]->value->string->body;
-    $user_id = $params[1]->value->string->body;
-    $password = $params[2]->value->string->body;
+    $user_id = trim($params[1]->value->string->body);
+    $password = trim($params[2]->value->string->body);
 
     // member controller을 이용해서 로그인 시도
     $oMemberController = &getController('member');
@@ -242,6 +241,11 @@
     }
 
     header("Content-Type: text/xml; charset=UTF-8");
+    header("Expires: Mon, 26 Jul 1997 05:00:00 GMT");
+    header("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT");
+    header("Cache-Control: no-store, no-cache, must-revalidate");
+    header("Cache-Control: post-check=0, pre-check=0", false);
+    header("Pragma: no-cache");
     print $content;
 
     exit();
diff --git a/modules/member/member.controller.php b/modules/member/member.controller.php
index 560626c88..828c03acc 100644
--- a/modules/member/member.controller.php
+++ b/modules/member/member.controller.php
@@ -869,7 +869,7 @@
             $member_info = $oMemberModel->getMemberInfoByUserID($user_id);
 
             // return 값이 없으면 존재하지 않는 사용자로 지정
-            if($member_info->user_id != $user_id) return new Object(-1, 'invalid_user_id');
+            if(!$user_id || $member_info->user_id != $user_id) return new Object(-1, 'invalid_user_id');
 
             // 비밀번호 검사 : 우선 md5() hash값으로 비굥
             if($password && $member_info->password != md5($password)) {
diff --git a/modules/member/member.model.php b/modules/member/member.model.php
index dff760dc9..6e895681e 100644
--- a/modules/member/member.model.php
+++ b/modules/member/member.model.php
@@ -103,6 +103,7 @@
          * @brief user_id에 해당하는 사용자 정보 return
          **/
         function getMemberInfoByUserID($user_id) {
+            if(!$user_id) return;
             if(!$this->member_info[$user_id]) {
                 $args->user_id = $user_id;
                 $output = executeQuery('member.getMemberInfo', $args);