diff --git a/module/api/control.php b/module/api/control.php index 5712d08677..68bfdea0bf 100755 --- a/module/api/control.php +++ b/module/api/control.php @@ -69,6 +69,7 @@ class api extends control $libs = $this->doc->getApiLibs($libID, 'nolink'); } + if($libID && !isset($libs[$libID])) return $this->send(array('result' => 'fail', 'load' => array('alert' => $this->lang->doc->accessDenied, 'locate' => $this->createLink('api', 'index')))); $lib = $libID ? zget($libs, $libID) : current($libs); $libID = !empty($lib->id) ? $lib->id : 0; $objectType = !empty($lib->product) ? 'product' : (!empty($lib->project) ? 'project' : 'nolink'); @@ -127,6 +128,8 @@ class api extends control $lib = zget($libs, $libID); $api->desc = htmlspecialchars_decode($api->desc); + if($libID && !isset($libs[$libID])) return $this->send(array('result' => 'fail', 'load' => array('alert' => $this->lang->doc->accessDenied, 'locate' => $this->createLink('api', 'index')))); + /* 生成一些必要的参数。 */ $type = $lib->product ? 'product' : ($lib->project ? 'project' : 'nolink'); $objectID = $lib->product ? $lib->product : $lib->project;