Просмотр исходного кода

Add input validation for ArticleMapController index

visuddhinanda 5 дней назад
Родитель
Сommit
a2850a0d9f
1 измененных файлов с 6 добавлено и 1 удалено
  1. 6 1
      api-v13/app/Http/Controllers/ArticleMapController.php

+ 6 - 1
api-v13/app/Http/Controllers/ArticleMapController.php

@@ -19,7 +19,10 @@ class ArticleMapController extends Controller
      */
      */
     public function index(Request $request)
     public function index(Request $request)
     {
     {
-        //
+        $request->validate([
+            'id' => ['required', 'uuid'],
+        ]);
+
         switch ($request->input('view')) {
         switch ($request->input('view')) {
             case 'anthology':
             case 'anthology':
                 $table = ArticleCollection::where('collect_id', $request->input('id'))
                 $table = ArticleCollection::where('collect_id', $request->input('id'))
@@ -29,6 +32,8 @@ class ArticleMapController extends Controller
                 $table = ArticleCollection::where('article_id', $request->input('id'))
                 $table = ArticleCollection::where('article_id', $request->input('id'))
                     ->leftJoin('articles', 'articles.uid', '=', 'article_collections.article_id');
                     ->leftJoin('articles', 'articles.uid', '=', 'article_collections.article_id');
                 break;
                 break;
+            default:
+                return $this->error('unknown view', null, 422);
         }
         }
         $count = $table->count();
         $count = $table->count();
         $result = [];
         $result = [];