AS1024/itflow
1
0
Fork 0
mirror of https://github.com/itflow-org/itflow synced 2026-08-15 20:15:12 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix some broken API calls after RBAC update

Browse Source
This commit is contained in:
johnnyq
2026-07-25 16:59:03 -04:00
parent c509b7f693
commit e6daf00528
7 changed files with 12 additions and 602 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
api/v1/products/read.php
View File

@@ -5,14 +5,14 @@ require_once '../validate_api_key.php';
require_once '../require_get_method.php';
// Products aren't stored against client IDs, so we instead validate the API key is for All Clients
// Products aren't client-scoped; access is gated by module_sales in enforce_api_rbac.php
if (isset($_GET['product_id']) && $client_id == "%") {
if (isset($_GET['product_id'])) {
// product via ID (single)
$id = intval($_GET['product_id']);
$sql = mysqli_query($mysqli, "SELECT * FROM products WHERE product_id = '$id'");
} elseif ($client_id == "%") {
} else {
// All products
$sql = mysqli_query($mysqli, "SELECT * FROM products ORDER BY product_id LIMIT $limit OFFSET $offset");
}