Subversion Repository Public Repository

Nextrek

Diff Revisions 722 vs 723 for /Android/SmartCharging/endPoints/nightly/edit_commento.php

Diff revisions: vs.
  @@ -13,20 +13,33 @@
13 13 $risposta = array();
14 14 $repo;
15 15
16 + $user_id;
17 +
16 18 try {
17 19 $conn = new PDO("mysql:host=".DB_SERVERNAME.";dbname=".DB_NAME, DB_USERNAME, DB_PASSWORD);
18 20 $conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
19 21 //echo "Connesso con successo al DB";
20 22
21 - if (!array_key_exists("token", $params) || !UserRepository::checkToken($params["token"], $conn)) {
23 + if (!array_key_exists("token", $params) || $params["token"] === "") {
22 24 //$risposta["return"] = -1;
23 - $risposta = createErrorMessage(-1, "Token non valido");
25 + $risposta = createErrorMessage(-1, "Parametro \"token\" non valido");
24 26 echo json_encode($risposta);
25 27 die();
26 28 }
27 29
30 + $user_id = UserRepository::getUserByToken($params["token"], $conn);
31 +
28 32 $repo = new CommentRepository($conn);
29 33
34 + $oldComment = $repo->getCommentById($params["comment_id"])["comment"];
35 +
36 + if (is_null($oldComment) || $oldComment->id_user != $user_id) { //l'utente non ha postato quel commento
37 + $risposta = createErrorMessage(-1, "Token non valido");
38 + //$risposta["return"] = -1;
39 + echo json_encode($risposta);
40 + die();
41 + }
42 +
30 43 $risposta = $repo->editComment($params["comment_id"], $params["content"]);
31 44 }
32 45 catch(PDOException $e)