Extend method hook validation for deletes

opensourcepos · Sep 28, 2021 · e8f27f5 · e8f27f5 · odiea · Sep 28, 2021
1 parent 2b031e6
commit e8f27f5
Show file tree

Hide file tree

Showing 3 changed files with 18 additions and 18 deletions.
diff --git a/application/config/hooks.php b/application/config/hooks.php
@@ -28,8 +28,8 @@
 
 $hook['pre_controller'][] = array(
     'class'    => '',
-    'function' => 'validate_save',
-    'filename' => 'save_hook.php',
+    'function' => 'validate_method',
+    'filename' => 'method_hook.php',
     'filepath' => 'hooks'
 );
 

diff --git a/application/hooks/method_hook.php b/application/hooks/method_hook.php
@@ -0,0 +1,16 @@
+<?php if ( ! defined('BASEPATH')) exit('No direct script access allowed');
+
+function validate_method()
+{
+
+    $url = $_SERVER['REQUEST_URI'];
+
+    $post_required = preg_match('/(save|delete|delete_item)\/?\d*?/', $url);
+
+    if($post_required && $_SERVER["REQUEST_METHOD"] != "POST" && empty($_POST))
+    {
+        echo "Method not allowed";
+        die;
+    }
+
+}
diff --git a/application/hooks/save_hook.php b/application/hooks/save_hook.php