Add secret key param to WSSearchSession - refs BT#9418

chamilo · Feb 25, 2015 · ab68ea0 · ab68ea0
1 parent a743554
commit ab68ea0
Showing 1 changed file with 8 additions and 2 deletions.
diff --git a/main/webservices/registration.soap.php b/main/webservices/registration.soap.php
@@ -5557,7 +5557,8 @@ function WSUserSubscribedInCourse ($params)
     '',
     array(
         'term' => array('name' => 'term', 'type' => 'xsd:string'),
-        'extrafields' => array('name' => 'extrafields', 'type' => 'xsd:string')
+        'extrafields' => array('name' => 'extrafields', 'type' => 'xsd:string'),
+        'secret_key'   => array('name' => 'secret_key', 'type' => 'xsd:string')
     )
 );
 
@@ -5634,10 +5635,15 @@ function WSUserSubscribedInCourse ($params)
 * Web service to get a session list filtered by name, description or short description extra field
 * @param string Secret key
 * @param string $extraFields Extrafields to include in request result
+* @param string $secretKey Secret key to check
 * @return array The list
 */
-function WSSearchSession($term, $extraFields)
+function WSSearchSession($term, $extraFields, $secretKey)
 {
+    if (!WSHelperVerifyKey($secretKey)) {
+        return return_error(WS_ERROR_SECRET_KEY);
+    }
+
     $fieldsToInclude = explode(',', $extraFields);
 
     foreach ($fieldsToInclude as &$field) {