Addd partner_id check in GET /preorder

This commit is contained in:
Frank Schubert
2022-12-13 20:15:01 +01:00
parent ae60ee365a
commit 33844bf778

View File

@@ -94,6 +94,10 @@ class PreorderApicontroller extends mfBaseApicontroller {
}
}
if($preorder->partner_id != $this->me->address_id) {
return mfResponse::NotFound(["message" => "Preorder not found"]);
}
$return = $preorder->getApiArray();
if(!$return) {
return mfResponse::NotFound(["message" => "Preorder not found"]);