Comunic/ComunicAPI
1
0
Fork 0
mirror of https://github.com/pierre42100/ComunicAPI synced 2024-11-23 13:59:29 +00:00
Code Issues Projects Releases Wiki Activity

Created a function to check post content

Browse Source
This commit is contained in:
Pierre 2018-01-14 19:29:45 +01:00
parent 29b989952d
commit cd4c9114dd
2 changed files with 39 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
RestControllers/postsController.php
View File

@ -109,13 +109,7 @@ class postsController {
$kind = $_POST['kind']; $kind = $_POST['kind'];
//Get the content of the post //Get the content of the post
if(!isset($_POST['content'])) $content = getPostContent("content");
Rest_fatal_error(400, "Please specify the content of the post !");
$content = $_POST['content'];
//Check the security of the content
if(!checkHTMLstring($content))
Rest_fatal_error(400, "Your request has been rejected because it has been considered as unsecure !");
//Get the visibility of the post //Get the visibility of the post
$visibility = $this->getPostVisibilityLevel("visibility"); $visibility = $this->getPostVisibilityLevel("visibility");
@ -350,6 +344,22 @@ class postsController {
return array("success" => "The visibility level has been updated !"); return array("success" => "The visibility level has been updated !");
} }
/**
* Update the content of a post
*
* @url POST /posts/update_content
*/
public function update_content(){
user_login_required();
//Get the post ID
$postID = $this->getFullAccessPostID("postID");
//Get the post content
}
/** /**
* Delete post * Delete post
* *

22
functions/requests.php
View File

@ -346,4 +346,26 @@ function check_youtube_id(string $id) : bool {
//The video is considered as valid //The video is considered as valid
return TRUE; return TRUE;
}
/**
* Get some content (for post actually) from a $_POST request
* and check its validity
*
* @param string $name The name of the $_POST field
* @return string The content of the post
*/
function getPostContent($name){
if(!isset($_POST[$name]))
Rest_fatal_error(400, "Please specify some content in '"+$name+"' !");
$content = $_POST[$name];
//Check the security of the content
if(!checkHTMLstring($content))
Rest_fatal_error(400, "Your request has been rejected because it has been considered as unsecure !");
//Return new content
return $content;
} }