Luca/thetool
1
0
Fork 0
Code Issues 5 Pull Requests 5 Actions Packages Projects Releases Wiki Activity

Added check for preorderType in address and campaign to api

Browse Source
This commit is contained in:
Frank Schubert
2023-07-19 11:44:16 +02:00
parent 9164177c58
commit 6568394aeb
1 changed files with 18 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
application/Api/v1/PreorderApicontroller.php
View File

@@ -535,6 +535,24 @@ class PreorderApicontroller extends mfBaseApicontroller {
return mfResponse::Forbidden(['message' => "Bestellung in diesem Netzgebiet/Cluster nicht erlaubt"]);
}
// check for allowed PreorderType in address
$allowed_freigabe = json_decode($address->freigabe);
if(!is_array($allowed_freigabe) || !count($allowed_freigabe)) {
return mfResponse::Forbidden(['message' => "Adresse (noch) nicht bestellbar"]);
}
if(!in_array($type, $allowed_freigabe)) {
return mfResponse::Forbidden(['message' => "Adresse (noch) nicht bestellbar"]);
}
// check for allowed PreorderType in campaign
$allowed_campaigntypes = $this->campaign->types;
if(!is_array($allowed_campaigntypes) || !count($allowed_campaigntypes)) {
return mfResponse::Forbidden(['message' => "PreorderType not allowed"]);
}
if(!array_key_exists($type, $allowed_campaigntypes)) {
return mfResponse::Forbidden(['message' => "PreorderType not allowed"]);
}
/*
* build fields
*/