fanbinit/rhymix
1
0
Fork 0
mirror of https://github.com/Lastorder-DC/rhymix.git synced 2026-01-07 02:31:40 +09:00
Code Issues Projects Releases Packages Wiki Activity

Fix domain restriction not being enforced when $document_srl is set

Browse source
This commit is contained in:
Kijin Sung 2025-08-31 23:55:17 +09:00
parent 70e04a1dc5
commit b79af31d0e
1 changed files with 12 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

23
classes/module/ModuleHandler.class.php
View file

@ -182,6 +182,9 @@ class ModuleHandler extends Handler
} }
} }
// Initialize module info.
$module_info = null;
// Get module info from document_srl. // Get module info from document_srl.
if($this->document_srl) if($this->document_srl)
{ {
@ -191,23 +194,21 @@ class ModuleHandler extends Handler
return false; return false;
} }
} }
else
{
$module_info = null;
}
// Get module info from mid. // Get module info from mid.
if(!$module_info && $this->mid) if(!$module_info && $this->mid)
{ {
$module_info = ModuleModel::getModuleInfoByMid($this->mid); $module_info = ModuleModel::getModuleInfoByMid($this->mid);
if($module_info && isset($module_info->domain_srl) && $module_info->domain_srl > -1) }
// If the module does not belong to the current domain, throw a 404.
if($module_info && isset($module_info->domain_srl) && $module_info->domain_srl > -1)
{
if($module_info->domain_srl != $site_module_info->domain_srl)
{ {
if($module_info->domain_srl != $site_module_info->domain_srl) $this->error = 'msg_module_is_not_exists';
{ $this->httpStatusCode = 404;
$this->error = 'msg_module_is_not_exists'; return true;
$this->httpStatusCode = 404;
return true;
}
} }
} }