* finish task #7803.
This commit is contained in:
@@ -37,7 +37,7 @@ class api extends control
|
||||
*/
|
||||
public function getModel($moduleName, $methodName, $params = '')
|
||||
{
|
||||
if(!$this->config->features->apiGetModel) die();
|
||||
if(!$this->config->features->apiGetModel) die(sprintf($this->lang->api->error->disabled, '$config->features->apiGetModel'));
|
||||
|
||||
$params = explode(',', $params);
|
||||
$newParams = array_shift($params);
|
||||
@@ -107,7 +107,7 @@ class api extends control
|
||||
*/
|
||||
public function sql($keyField = '')
|
||||
{
|
||||
if(!$this->config->features->apiSQL) die();
|
||||
if(!$this->config->features->apiSQL) die(sprintf($this->lang->api->error->disabled, '$config->features->apiSQL'));
|
||||
|
||||
$sql = isset($_POST['sql']) ? $this->post->sql : '';
|
||||
$this->view->results = $this->api->sql($sql, $keyField);
|
||||
|
||||
@@ -28,3 +28,4 @@ $lang->api->post = 'POST方式调试请参照页面表单';
|
||||
|
||||
$lang->api->error = new stdclass();
|
||||
$lang->api->error->onlySelect = 'SQL查询接口只允许SELECT查询';
|
||||
$lang->api->error->disabled = '因为安全原因,该功能被禁用。可以到config目录,修改配置项 %s,打开此功能。';
|
||||
|
||||
@@ -94,7 +94,7 @@ class apiModel extends model
|
||||
*/
|
||||
public function sql($sql, $keyField = '')
|
||||
{
|
||||
if(!$this->config->features->apiGetSQL) return false;
|
||||
if(!$this->config->features->apiGetSQL) return sprintf($this->lang->api->error->disabled, '$config->features->apiSQL');
|
||||
|
||||
$sql = trim($sql);
|
||||
if(strpos($sql, ';') !== false) $sql = substr($sql, 0, strpos($sql, ';'));
|
||||
|
||||
Reference in New Issue
Block a user