* finish task #7803.

This commit is contained in:
z
2020-09-07 14:06:04 +08:00
parent 5a5119fdbc
commit 7b224fd95f
3 changed files with 4 additions and 3 deletions
+2 -2
View File
@@ -37,7 +37,7 @@ class api extends control
*/
public function getModel($moduleName, $methodName, $params = '')
{
if(!$this->config->features->apiGetModel) die();
if(!$this->config->features->apiGetModel) die(sprintf($this->lang->api->error->disabled, '$config->features->apiGetModel'));
$params = explode(',', $params);
$newParams = array_shift($params);
@@ -107,7 +107,7 @@ class api extends control
*/
public function sql($keyField = '')
{
if(!$this->config->features->apiSQL) die();
if(!$this->config->features->apiSQL) die(sprintf($this->lang->api->error->disabled, '$config->features->apiSQL'));
$sql = isset($_POST['sql']) ? $this->post->sql : '';
$this->view->results = $this->api->sql($sql, $keyField);
+1
View File
@@ -28,3 +28,4 @@ $lang->api->post = 'POST方式调试请参照页面表单';
$lang->api->error = new stdclass();
$lang->api->error->onlySelect = 'SQL查询接口只允许SELECT查询';
$lang->api->error->disabled = '因为安全原因,该功能被禁用。可以到config目录,修改配置项 %s,打开此功能。';
+1 -1
View File
@@ -94,7 +94,7 @@ class apiModel extends model
*/
public function sql($sql, $keyField = '')
{
if(!$this->config->features->apiGetSQL) return false;
if(!$this->config->features->apiGetSQL) return sprintf($this->lang->api->error->disabled, '$config->features->apiSQL');
$sql = trim($sql);
if(strpos($sql, ';') !== false) $sql = substr($sql, 0, strpos($sql, ';'));