fanbinit/rhymix
1
0
Fork 0
mirror of https://github.com/Lastorder-DC/rhymix.git synced 2026-05-04 17:44:38 +09:00
Code Issues Projects Releases Packages Wiki Activity

fix #2091 권한이 없는 비밀글을 스크랩할 수 없도록 고침

Browse source
This commit is contained in:
bnu 2017-05-24 13:59:00 +09:00 • committed by Kijin Sung
parent fa1078a0d6
commit 9739b72bf8
1 changed files with 9 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

9
modules/member/member.controller.php
View file

@ -127,9 +127,16 @@ class memberController extends member
$document_srl = (int)Context::get('document_srl'); $document_srl = (int)Context::get('document_srl');
if(!$document_srl) $document_srl = (int)Context::get('target_srl'); if(!$document_srl) $document_srl = (int)Context::get('target_srl');
if(!$document_srl) return new Object(-1,'msg_invalid_request'); if(!$document_srl) return new Object(-1,'msg_invalid_request');
// Get document // Get document
$oDocumentModel = getModel('document'); $oDocumentModel = getModel('document');
$oDocument = $oDocumentModel->getDocument($document_srl); $oDocument = $oDocumentModel->getDocument($document_srl);
if($oDocument->isSecret() && !$oDocument->isGranted())
{
return new Object(-1, 'msg_is_secret');
}
// Variables // Variables
$args = new stdClass(); $args = new stdClass();
$args->document_srl = $document_srl; $args->document_srl = $document_srl;
@ -139,9 +146,11 @@ class memberController extends member
$args->nick_name = $oDocument->get('nick_name'); $args->nick_name = $oDocument->get('nick_name');
$args->target_member_srl = $oDocument->get('member_srl'); $args->target_member_srl = $oDocument->get('member_srl');
$args->title = $oDocument->get('title'); $args->title = $oDocument->get('title');
// Check if already scrapped // Check if already scrapped
$output = executeQuery('member.getScrapDocument', $args); $output = executeQuery('member.getScrapDocument', $args);
if($output->data->count) return new Object(-1, 'msg_alreay_scrapped'); if($output->data->count) return new Object(-1, 'msg_alreay_scrapped');
// Insert // Insert
$output = executeQuery('member.addScrapDocument', $args); $output = executeQuery('member.addScrapDocument', $args);
if(!$output->toBool()) return $output; if(!$output->toBool()) return $output;