ページ

app/Http/Controllers/SiteController.php

@@ -693,74 +693,137 @@ class SiteController extends Controller {
     return $res;
   }
 
-  public function getPage($slug) { // /api/rpc/site/page/getpage/slug
-    $get = DB::table('blg_content')
-      ->select('id', 'title', 'slug', 'public_status', 'isMenu', 'message')
-      ->where('public_status', 0)
-      ->where('isPost', 0)
-      ->where('slug', $slug)
-      ->orderBy('sortorder', 'asc')
-      ->get();
+  public function getPage($slug, Request $request) { // /api/rpc/site/page/getpage/slug
+    $valid = $this->objAuth->getPermissions($request->username, $request->password);
 
     $res = array();
 
-    foreach ($get as $i) {
-      array_push($res, [
-        'id' => $i->id,
-        'title' => $i->title,
-        'slug' => $i->slug,
-        'public_status' => $i->public_status,
-        'isMenu' => $i->isMenu,
-        'message' => $i->message
-      ]);
+    if ($valid['blg_editpage'] == 1) {
+      $get = DB::table('blg_content')
+        ->select('id', 'title', 'slug', 'public_status', 'message')
+        ->where('isPost', 0)
+        ->where('slug', $slug)
+        ->orderBy('sortorder', 'asc')
+        ->get();
+
+      foreach ($get as $i) {
+        array_push($res, [
+          'id' => $i->id,
+          'title' => $i->title,
+          'slug' => $i->slug,
+          'public_status' => $i->public_status,
+          'message' => $i->message
+        ]);
+      }
+    }
+    else {
+      $get = DB::table('blg_content')
+        ->select('id', 'title', 'slug', 'public_status', 'message')
+        ->where('public_status', 0)
+        ->where('isPost', 0)
+        ->where('slug', $slug)
+        ->orderBy('sortorder', 'asc')
+        ->get();
+
+      foreach ($get as $i) {
+        array_push($res, [
+          'id' => $i->id,
+          'title' => $i->title,
+          'slug' => $i->slug,
+          'public_status' => $i->public_status,
+          'message' => $i->message
+        ]);
+      }
     }
 
     return $res;
   }
 
   public function newPage(Request $request) { // /api/rpc/site/page/new
-    $pubdate = 0;
+    $check = $this->objAuth->checkLegit($request->username, $request->password);
 
-    if ($request->public_status == 1) {
-      if ($request->publish_date <= time()) {
-        return \Response::json(array('error' => 'Publish date can\'t be older than post date.'));
+    if ($check == 0) {
+      return \Response::json(array('error' => 'ログインされませんでした。'));
+    }
+    else {
+      $valid = $this->objAuth->getPermissions($request->username, $request->password);
+
+      if ($valid['blg_addpage'] == 1) {
+        $pubdate = 0;
+
+        if ($request->public_status == 1) {
+          if ($request->publish_date <= time()) {
+            return \Response::json(array('error' => 'Publish date can\'t be older than post date.'));
+          }
+        }
+
+        if ($request->public_status == 1) $pubdate = $request->publish_date;
+        else $pubdate = time();
+
+        $add = DB::table('blg_content')
+          ->insert([
+            'user_id' => 0,
+            'isPost' => 0,
+            'title' => $request->title,
+            'slug' => $request->slug,
+            'post_date' => 0,
+            'publish_date' => $pubdate,
+            'sortorder' => $request->sortorder,
+            'public_status' => $request->public_status,
+            'isMenu' => $request->isMenu,
+            'message' => $request->message
+          ]);
+
+        return \Response::json($add);
+      }
+      else {
+        return \Response::json(array('error' => '不許可。'));
       }
     }
-
-    if ($request->public_status == 1) $pubdate = $request->publish_date;
-    else $pubdate = time();
-
-    $add = DB::table('blg_content')
-      ->insert([
-        'user_id' => 0,
-        'isPost' => 0,
-        'title' => $request->title,
-        'slug' => $request->slug,
-        'post_date' => 0,
-        'publish_date' => $pubdate,
-        'sortorder' => $request->sortorder,
-        'public_status' => $request->public_status,
-        'isMenu' => $request->isMenu,
-        'message' => $request->message
-      ]);
-
-    return \Response::json($add);
   }
 
   public function editPage(Request $request) { // /api/rpc/site/page/edit
-    return DB::table('blg_content')
-      ->where('id', $request->id)
-      ->update([
-        'title' => $request->title,
-        'slug' => $request->slug,
-        'public_status' => $request->public_status,
-        'isMenu' => $request->isMenu,
-        'message' => $request->message
-      ]);
+    $check = $this->objAuth->checkLegit($request->username, $request->password);
+
+    if ($check == 0) {
+      return \Response::json(array('error' => 'ログインされませんでした。'));
+    }
+    else {
+      $valid = $this->objAuth->getPermissions($request->username, $request->password);
+
+      if ($valid['blg_editpage'] == 1) {
+        return DB::table('blg_content')
+          ->where('id', $request->id)
+          ->update([
+            'title' => $request->title,
+            'slug' => $request->slug,
+            'public_status' => $request->public_status,
+            'isMenu' => $request->isMenu,
+            'message' => $request->message
+          ]);
+      }
+      else {
+        return \Response::json(array('error' => '不許可。'));
+      }
+    }
   }
 
   public function deletePage(Request $request) { // /api/rpc/site/page/delete
-    return DB::table('blg_content')->where('id', $request->id)->delete();
+    $check = $this->objAuth->checkLegit($request->username, $request->password);
+
+    if ($check == 0) {
+      return \Response::json(array('error' => 'ログインされませんでした。'));
+    }
+    else {
+      $valid = $this->objAuth->getPermissions($request->username, $request->password);
+
+      if ($valid['blg_delpage'] == 1) {
+        return DB::table('blg_content')->where('id', $request->id)->delete();
+      }
+      else {
+        return \Response::json(array('error' => '不許可。'));
+      }
+    }
   }
 
   // Contact Fields