diff --git a/backend/app/Http/Controllers/Api/ChildrenController.php b/backend/app/Http/Controllers/Api/ChildrenController.php index 2f0f7546..e4fcc7d9 100644 --- a/backend/app/Http/Controllers/Api/ChildrenController.php +++ b/backend/app/Http/Controllers/Api/ChildrenController.php @@ -371,6 +371,8 @@ class ChildrenController extends Controller { $err = 'アクセスできません。'; if (request()->route()->action['as'] == 'cdp') { abort_if(null === session()->get('fathers') || null === ($rel = FatherRelation::where('child_id', (int)$child_id)->where('father_id', (int)session()->get('fathers')['id'])->first()), 404, $err); + unset($params->email); + unset($params->tel); } // 同じく子画面から他の親の詳細ページをアクセスすれば、404となります。