fanbinit/rhymix
1
0
Fork 0
mirror of https://github.com/Lastorder-DC/rhymix.git synced 2026-01-07 18:51:41 +09:00
Code Issues Projects Releases Packages Wiki Activity

fix #2092 권한이 없는 글의 첨부된 파일 목록을 볼 수 있는 문제 고침

Browse source
This commit is contained in:
bnu 2017-05-24 16:49:32 +09:00 • committed by Kijin Sung
parent 9739b72bf8
commit 71ca1385ac
1 changed files with 28 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

44
modules/file/file.model.php
View file

@ -34,12 +34,11 @@ class fileModel extends file
if($upload_target_srl)
{
$tmp_files = $this->getFiles($upload_target_srl);
$file_count = count($tmp_files);
if($tmp_files instanceof Object && !$tmp_files->toBool()) return $tmp_files;
$files = array();
for($i=0;$i<$file_count;$i++)
foreach($tmp_files as $file_info)
{
$file_info = $tmp_files[$i];
if(!$file_info->file_srl) continue;
$obj = new stdClass;
@ -244,27 +243,40 @@ class fileModel extends file
*/
function getFiles($upload_target_srl, $columnList = array(), $sortIndex = 'file_srl', $ckValid = false)
{
$oDocumentModel = getModel('document');
$oCommentModel = getModel('comment');
$targetItem = $oDocumentModel->getDocument($upload_target_srl);
if(!$targetItem->isExists())
{
$targetItem = $oCommentModel->getComment($upload_target_srl);
}
if(!$targetItem->isExists())
{
return new Object(-1, 'msg_invalid_request');
}
if($targetItem->isSecret() && !$targetItem->isGranted())
{
return new Object(-1, 'msg_invalid_request');
}
$args = new stdClass();
$args->upload_target_srl = $upload_target_srl;
$args->sort_index = $sortIndex;
if($ckValid) $args->isvalid = 'Y';
$output = executeQuery('file.getFiles', $args, $columnList);
if(!$output->data) return;
$file_list = $output->data;
if($file_list && !is_array($file_list)) $file_list = array($file_list);
$file_count = count($file_list);
for($i=0;$i<$file_count;$i++)
$output = executeQueryArray('file.getFiles', $args, $columnList);
if(!$output->data)
{
return array();
}
$fileList = array();
foreach ($output->data as $file)
{
$file = $file_list[$i];
$file->source_filename = escape($file->source_filename, false);
$file->download_url = $this->getDownloadUrl($file->file_srl, $file->sid, $file->module_srl);
$file_list[$i] = $file;
$fileList[] = $file;
}
return $file_list;
return $fileList;
}
/**