Parcourir la source

fix security case on cancel order

gdias il y a 1 mois
Parent
commit
88d7f892ab
1 fichiers modifiés avec 1 ajouts et 2 suppressions
  1. 1 2
      controllers/OrderbookUpdateStatusController.php

+ 1 - 2
controllers/OrderbookUpdateStatusController.php

@@ -28,14 +28,13 @@ class OrderbookUpdateStatusController
 
         try {
             val::key('orderbook_id', val::intType()->positive())
-                ->key('status_id', val::intType()->min(0))
                 ->assert($body);
         } catch (ValidationException $e) {
             return ResponseLib::sendFail('Validation failed: ' . $e->getFullMessage(), [], 'E_VALIDATE')->withStatus(400);
         }
 
         $orderbookId = (int)$body['orderbook_id'];
-        $statusId = (int)$body['status_id'];
+        $statusId = 3;
 
         try {
             $orderbook = $this->orderbookModel->findByIdWithToken($orderbookId);