Changeset 18142 for branches/comu-ver2/data/class/pages/products/LC_Page_Products_List.php

Timestamp:

2009/06/28 19:24:15 (15 years ago)

Author:

ramrun

Message:

商品一覧ページでcategory_id、商品詳細ページでproduct_idの正当性をチェック

File:

• branches/comu-ver2/data/class/pages/products/LC_Page_Products_List.php (modified) (3 diffs)

branches/comu-ver2/data/class/pages/products/LC_Page_Products_List.php

@@ -73 +73 @@
      */
     function process() {
+        // カテゴリIDの正当性チェック
+        $this->lfCheckCategoryId();
+
         $objView = new SC_SiteView();
         $conn = new SC_DBConn();
@@ -220 +223 @@
      */
     function mobileProcess() {
+        // カテゴリIDの正当性チェック
+        $this->lfCheckCategoryId();
+
         $objView = new SC_MobileView();
         $conn = new SC_DBConn();
@@ -369 +375 @@
     function destroy() {
         parent::destroy();
+    }
+
+    /* カテゴリIDの正当性チェック */
+    function lfCheckCategoryId() {
+        $objDb = new SC_Helper_DB_Ex();
+        $category_id = $_POST['category_id'] ? $_POST['category_id'] : $_GET['category_id'];
+        if (!defined('MOBILE_SITE') && !isset($_REQUEST['category_id']))
+            SC_Utils_Ex::sfDispSiteError(CATEGORY_NOT_FOUND);
+        if ($category_id
+                && (!SC_Utils_Ex::sfIsInt($category_id)
+                || SC_Utils_Ex::sfIsZeroFilling($category_id)
+                || !$objDb->sfIsRecord('dtb_category', 'category_id', (array)$category_id, 'del_flg = 0')))
+            SC_Utils_Ex::sfDispSiteError(CATEGORY_NOT_FOUND);
     }