11<?php
22
3- declare (strict_types=1 );
4-
53/**
64 * The Admin FAQ Controller
75 * This Source Code Form is subject to the terms of the Mozilla Public License,
1614 * @since 2023-10-28
1715 */
1816
17+ declare (strict_types=1 );
18+
1919namespace phpMyFAQ \Controller \Administration \Api ;
2020
2121use DateTime ;
@@ -82,7 +82,10 @@ public function create(Request $request): JsonResponse
8282
8383 $ data = json_decode ($ request ->getContent ())->data ;
8484
85- if (!Token::getInstance ($ this ->container ->get ('session ' ))->verifyToken ('edit-faq ' , $ data ->{'pmf-csrf-token ' })) {
85+ if (!Token::getInstance ($ this ->container ->get ('session ' ))->verifyToken (
86+ 'pmf-csrf-token ' ,
87+ $ data ->{'pmf-csrf-token ' },
88+ )) {
8689 return $ this ->json (['error ' => Translation::get (
8790 languageKey: 'msgNoPermission ' ,
8891 )], Response::HTTP_UNAUTHORIZED );
@@ -292,7 +295,10 @@ public function update(Request $request): JsonResponse
292295
293296 $ data = json_decode ($ request ->getContent ())->data ;
294297
295- if (!Token::getInstance ($ this ->container ->get ('session ' ))->verifyToken ('edit-faq ' , $ data ->{'pmf-csrf-token ' })) {
298+ if (!Token::getInstance ($ this ->container ->get ('session ' ))->verifyToken (
299+ 'pmf-csrf-token ' ,
300+ $ data ->{'pmf-csrf-token ' },
301+ )) {
296302 return $ this ->json (['error ' => Translation::get (
297303 languageKey: 'msgNoPermission ' ,
298304 )], Response::HTTP_UNAUTHORIZED );
@@ -538,7 +544,7 @@ public function activate(Request $request): JsonResponse
538544 $ faqLanguage = Filter::filterVar ($ data ->faqLanguage , FILTER_SANITIZE_SPECIAL_CHARS );
539545 $ checked = Filter::filterVar ($ data ->checked , FILTER_VALIDATE_BOOLEAN );
540546
541- if (!Token::getInstance ($ this ->container ->get ('session ' ))->verifyToken ('faq-overview ' , $ data ->csrf )) {
547+ if (!Token::getInstance ($ this ->container ->get ('session ' ))->verifyToken ('pmf-csrf-token ' , $ data ->csrf )) {
542548 return $ this ->json (['error ' => Translation::get (
543549 languageKey: 'msgNoPermission ' ,
544550 )], Response::HTTP_UNAUTHORIZED );
@@ -582,7 +588,7 @@ public function sticky(Request $request): JsonResponse
582588 $ faqLanguage = Filter::filterVar ($ data ->faqLanguage , FILTER_SANITIZE_SPECIAL_CHARS );
583589 $ checked = Filter::filterVar ($ data ->checked , FILTER_VALIDATE_BOOLEAN );
584590
585- if (!Token::getInstance ($ this ->container ->get ('session ' ))->verifyToken ('faq-overview ' , $ data ->csrf )) {
591+ if (!Token::getInstance ($ this ->container ->get ('session ' ))->verifyToken ('pmf-csrf-token ' , $ data ->csrf )) {
586592 return $ this ->json (['error ' => Translation::get (
587593 languageKey: 'msgNoPermission ' ,
588594 )], Response::HTTP_UNAUTHORIZED );
@@ -627,10 +633,10 @@ public function delete(Request $request): JsonResponse
627633 $ faqId = Filter::filterVar ($ data ->faqId , FILTER_VALIDATE_INT );
628634 $ faqLanguage = Filter::filterVar ($ data ->faqLanguage , FILTER_SANITIZE_SPECIAL_CHARS );
629635
630- if (!Token::getInstance ($ this ->container ->get ('session ' ))->verifyToken ('faq-overview ' , $ data ->csrf )) {
631- return $ this ->json ([' error ' => Translation:: get (
632- languageKey: 'msgNoPermission ' ,
633- ) ], Response::HTTP_UNAUTHORIZED );
636+ if (!Token::getInstance ($ this ->container ->get ('session ' ))->verifyToken ('pmf-csrf-token ' , $ data ->csrf )) {
637+ return $ this ->json ([
638+ ' error ' => ' CSRF Token - ' . Translation:: get ( languageKey: 'msgNoPermission ' ) ,
639+ ], Response::HTTP_UNAUTHORIZED );
634640 }
635641
636642 $ adminLog = $ this ->container ->get ('phpmyfaq.admin.admin-log ' );
@@ -655,7 +661,7 @@ public function search(Request $request): JsonResponse
655661
656662 $ data = json_decode ($ request ->getContent ());
657663
658- if (!Token::getInstance ($ this ->container ->get ('session ' ))->verifyToken ('edit-faq ' , $ data ->csrf )) {
664+ if (!Token::getInstance ($ this ->container ->get ('session ' ))->verifyToken ('pmf-csrf-token ' , $ data ->csrf )) {
659665 return $ this ->json (['error ' => Translation::get (
660666 languageKey: 'msgNoPermission ' ,
661667 )], Response::HTTP_UNAUTHORIZED );
0 commit comments