iarv/Piwigo
1
0
Fork 0
mirror of https://github.com/Piwigo/Piwigo.git synced 2026-03-28 17:42:57 +01:00
Code Issues Packages Projects Releases Wiki Activity

two new options for API methods : 'admin_only' and 'post_only'

Browse Source 
git-svn-id: http://piwigo.org/svn/trunk@25115 68402e56-0260-453c-a942-63ccdbb3a9ee
This commit is contained in:
mistic100
2013-10-24 10:01:35 +00:00
parent e7fafb73a1
commit d6211432ec
3 changed files with 104 additions and 220 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
include/ws_core.inc.php
View File

@@ -324,7 +324,9 @@ Request format: ".@$this->_requestFormat." Response format: ".@$this->_responseF
* @param description string - a description of the method.
* @param include_file string - a file to be included befaore the callback is executed
* @param options array
* @option bool hidden (hidden) - if true, this method won't be visible by reflection.getMethodList
* @option bool hidden (optional) - if true, this method won't be visible by reflection.getMethodList
* @option bool admin_only (optional)
* @option bool post_only (optional)
*/
function addMethod($methodName, $callback, $params=array(), $description='', $include_file='', $options=array())
{
@@ -388,7 +390,7 @@ Request format: ".@$this->_requestFormat." Response format: ".@$this->_responseF
return isset($signature) ? $signature : array();
}
/*static*/ function isPost()
static function isPost()
{
return isset($HTTP_RAW_POST_DATA) or !empty($_POST);
}
@@ -510,6 +512,16 @@ Request format: ".@$this->_requestFormat." Response format: ".@$this->_responseF
{
return new PwgError(WS_ERR_INVALID_METHOD, 'Method name is not valid');
}
if ( isset($method['options']['post_only']) and $method['options']['post_only'] and !self::isPost() )
{
return new PwgError(405, 'This method requires HTTP POST');
}
if ( isset($method['options']['admin_only']) and $method['options']['admin_only'] and !is_admin() )
{
return new PwgError(401, 'Access denied');
}
// parameter check and data correction
$signature = $method['signature'];