fanbinit/rhymix
1
0
Fork 0
mirror of https://github.com/Lastorder-DC/rhymix.git synced 2026-01-08 19:21:40 +09:00
Code Issues Projects Releases Packages Wiki Activity

Restrict addGrant() to current request only

Browse source
This commit is contained in:
Kijin Sung 2017-03-02 23:24:28 +09:00
parent e4fe2430d3
commit 9143493f13
6 changed files with 22 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

18
modules/comment/comment.controller.php
View file

@ -255,7 +255,11 @@ class commentController extends comment
*/
function addGrant($comment_srl)
{
$_SESSION['own_comment'][$comment_srl] = TRUE;
$comment = getModel('comment')->getComment($comment_srl);
if ($comment->isExists())
{
$comment->setGrant();
}
}
/**
@ -568,18 +572,18 @@ class commentController extends comment
}
}
// grant autority of the comment
if(!$manual_inserted)
{
$this->addGrant($obj->comment_srl);
}
// call a trigger(after)
ModuleHandler::triggerCall('comment.insertComment', 'after', $obj);
// commit
$oDB->commit();
// grant autority of the comment
if(!$manual_inserted)
{
$this->addGrant($obj->comment_srl);
}
if(!$manual_inserted)
{
// send a message if notify_message option in enabled in the original article

4
modules/comment/comment.item.php
View file

@ -93,7 +93,7 @@ class commentItem extends Object
function isGranted()
{
if($_SESSION['own_comment'][$this->comment_srl])
if($_SESSION['granted_comment'][$this->comment_srl])
{
return TRUE;
}
@ -130,7 +130,7 @@ class commentItem extends Object
function setGrantForSession()
{
$_SESSION['own_comment'][$this->comment_srl] = true;
$_SESSION['granted_comment'][$this->comment_srl] = true;
$this->setGrant();
}

2
modules/comment/comment.model.php
View file

@ -121,7 +121,7 @@ class commentModel extends comment
*/
function isGranted($comment_srl)
{
return $_SESSION['own_comment'][$comment_srl];
return $_SESSION['granted_comment'][$comment_srl];
}
/**

6
modules/document/document.controller.php
View file

@ -331,7 +331,11 @@ class documentController extends document
*/
function addGrant($document_srl)
{
$_SESSION['own_document'][$document_srl] = true;
$oDocument = getModel('document')->getDocument($document_srl);
if ($oDocument->isExists())
{
$oDocument->setGrant();
}
}
/**

4
modules/document/document.item.php
View file

@ -162,7 +162,7 @@ class documentItem extends Object
function isGranted()
{
if ($_SESSION['own_document'][$this->document_srl])
if ($_SESSION['granted_document'][$this->document_srl])
{
return $this->grant_cache = true;
}
@ -203,7 +203,7 @@ class documentItem extends Object
function setGrantForSession()
{
$_SESSION['own_document'][$this->document_srl] = true;
$_SESSION['granted_document'][$this->document_srl] = true;
$this->setGrant();
}

2
modules/document/document.model.php
View file

@ -25,7 +25,7 @@ class documentModel extends document
*/
function isGranted($document_srl)
{
return $_SESSION['own_document'][$document_srl];
return $_SESSION['granted_document'][$document_srl];
}
/**