Merge pull request #366 from nanasess/fix-api

API機能が無効の場合は 403 Forbidden を返すよう修正
EC-CUBE · Jan 21, 2020 · a164798 · a164798
2 parents 6c237cc + 7eeb469
commit a164798
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/data/class/api/SC_Api_Operation.php b/data/class/api/SC_Api_Operation.php
@@ -416,6 +416,10 @@ protected function getOperationRequestEcho($arrParam, $start_time)
      */
     public function sendApiResponse($type, $response_outer_name, &$arrResponse)
     {
+        if (API_ENABLE_FLAG == false) {
+            http_response_code(403);
+            return;
+        }
         switch ($type) {
             case 'xml':
                 SC_Api_Utils_Ex::sendResponseXml($response_outer_name, $arrResponse);