- invalid get parameters

Anastasia
1 parent bafee7a0
Showing 1 changed file with 20 additions and 1 deletions Show diff stats
frontend/components/UrlManager.php
@@ -5,6 +5,7 @@
     use artbox\core\models\Alias;
     use artbox\core\services\Languages;
     use yii\helpers\Json;
+    use yii\web\NotFoundHttpException;
     use yii\web\Request;
     /**
@@ -42,6 +43,15 @@
          * @param \artbox\core\services\Languages $languages
          * @param array                           $config
          */
+        
+        public $params = [
+            'id' => 'id',
+            'page' => 'page',
+            'per-page' => 'per_page',
+            'book_id' => 'book_id',
+            'q' => 'q',
+            'tag' => 'tag',
+        ];
         public function __construct(Languages $languages, array $config = [])
         {
             $this->languages = $languages;
@@ -77,7 +87,7 @@
                               ]
                           )
                           ->one();
-            
+            $this->invalidParams(\Yii::$app->request->queryParams);
             if ($alias !== null) {
                 $params = Json::decode($alias->route);
@@ -185,4 +195,13 @@
             //                                    ->send();
             //            }
         }
+        
+        protected function invalidParams($requestParams){
+            foreach ($requestParams as $key =>$param){
+                
+                if (!array_key_exists($key, $this->params)){
+                    throw new NotFoundHttpException();
+                }
+            }
+        }
     }
 \ No newline at end of file