diff --git a/module/api/control.php b/module/api/control.php index 3dec25ac7a..7d165c8871 100644 --- a/module/api/control.php +++ b/module/api/control.php @@ -37,7 +37,7 @@ class api extends control */ public function getModel($moduleName, $methodName, $params = '') { - if(!$this->config->features->apiGetModel) die(); + if(!$this->config->features->apiGetModel) die(sprintf($this->lang->api->error->disabled, '$config->features->apiGetModel')); $params = explode(',', $params); $newParams = array_shift($params); @@ -107,7 +107,7 @@ class api extends control */ public function sql($keyField = '') { - if(!$this->config->features->apiSQL) die(); + if(!$this->config->features->apiSQL) die(sprintf($this->lang->api->error->disabled, '$config->features->apiSQL')); $sql = isset($_POST['sql']) ? $this->post->sql : ''; $this->view->results = $this->api->sql($sql, $keyField); diff --git a/module/api/lang/zh-cn.php b/module/api/lang/zh-cn.php index 031ee3659e..2ea834808c 100644 --- a/module/api/lang/zh-cn.php +++ b/module/api/lang/zh-cn.php @@ -28,3 +28,4 @@ $lang->api->post = 'POST方式调试请参照页面表单'; $lang->api->error = new stdclass(); $lang->api->error->onlySelect = 'SQL查询接口只允许SELECT查询'; +$lang->api->error->disabled = '因为安全原因,该功能被禁用。可以到config目录,修改配置项 %s,打开此功能。'; diff --git a/module/api/model.php b/module/api/model.php index 15d71a255c..6ee5903edb 100644 --- a/module/api/model.php +++ b/module/api/model.php @@ -94,7 +94,7 @@ class apiModel extends model */ public function sql($sql, $keyField = '') { - if(!$this->config->features->apiGetSQL) return false; + if(!$this->config->features->apiGetSQL) return sprintf($this->lang->api->error->disabled, '$config->features->apiSQL'); $sql = trim($sql); if(strpos($sql, ';') !== false) $sql = substr($sql, 0, strpos($sql, ';'));