|
1
|
|
|
<?php |
|
2
|
|
|
|
|
3
|
|
|
|
|
4
|
|
|
class UpdateSecondHandProduct extends Controller |
|
|
|
|
|
|
5
|
|
|
{ |
|
6
|
|
|
|
|
7
|
|
|
private static $allowed_actions = array( |
|
|
|
|
|
|
8
|
|
|
'unpublish' => '->MyPermissionCheck', |
|
9
|
|
|
'archive' => '->MyPermissionCheck' |
|
10
|
|
|
); |
|
11
|
|
|
|
|
12
|
|
|
|
|
13
|
|
|
/** |
|
14
|
|
|
* make the page less easy to access |
|
15
|
|
|
* (but still accessible) |
|
16
|
|
|
* - code => ip address |
|
17
|
|
|
* @var string |
|
18
|
|
|
*/ |
|
19
|
|
|
private static $secret_codes = array(); |
|
|
|
|
|
|
20
|
|
|
|
|
21
|
|
|
function init() |
|
|
|
|
|
|
22
|
|
|
{ |
|
23
|
|
|
parent::init(); |
|
24
|
|
|
if(! $this->MyPermissionCheck()) { |
|
25
|
|
|
die('you do not have access'); |
|
|
|
|
|
|
26
|
|
|
} |
|
27
|
|
|
} |
|
28
|
|
|
|
|
29
|
|
|
function unpublish($request) |
|
|
|
|
|
|
30
|
|
|
{ |
|
31
|
|
|
$otherID = $request->param("OtherID"); |
|
32
|
|
|
if(isset($otherID)) { |
|
33
|
|
|
$internalItemID = Convert::raw2sql($otherID); |
|
34
|
|
|
$secondHandProduct = SecondHandProduct::get()->filter(['internalItemID' => $internalItemID])->first(); |
|
35
|
|
|
if($secondHandProduct){ |
|
36
|
|
|
$secondHandProduct->deleteFromStage('Live'); |
|
37
|
|
|
} |
|
38
|
|
|
} |
|
39
|
|
|
} |
|
40
|
|
|
|
|
41
|
|
|
function archive($request) |
|
|
|
|
|
|
42
|
|
|
{ |
|
43
|
|
|
$otherID = $request->param("OtherID"); |
|
44
|
|
|
if(isset($otherID)) { |
|
45
|
|
|
$internalItemID = Convert::raw2sql($otherID); |
|
46
|
|
|
$secondHandProduct = SecondHandProduct::get()->filter(['internalItemID' => $internalItemID])->first(); |
|
47
|
|
|
if (is_a($secondHandProduct, Object::getCustomClass('SiteTree'))) { |
|
48
|
|
|
$secondHandProduct->deleteFromStage('Live'); |
|
49
|
|
|
$secondHandProduct->deleteFromStage('Stage'); |
|
50
|
|
|
} else { |
|
51
|
|
|
$secondHandProduct->delete(); |
|
52
|
|
|
} |
|
53
|
|
|
} |
|
54
|
|
|
} |
|
55
|
|
|
|
|
56
|
|
|
/** |
|
57
|
|
|
* @return Boolean |
|
|
|
|
|
|
58
|
|
|
*/ |
|
59
|
|
View Code Duplication |
function MyPermissionCheck() |
|
|
|
|
|
|
60
|
|
|
{ |
|
61
|
|
|
$codesWithIPs = $this->Config()->get('secret_codes'); |
|
62
|
|
|
|
|
63
|
|
|
//with a code you do not have to be logged in ... |
|
64
|
|
|
if(count($codesWithIPs)) { |
|
65
|
|
|
$ip = EcommerceCountry::get_ip(); |
|
66
|
|
|
$code = $this->request->param('ID'); |
|
67
|
|
|
if($code) { |
|
68
|
|
|
$testIP = isset($codesWithIPs[$code]) ? $codesWithIPs[$code] : false; |
|
69
|
|
|
if($testIP) { |
|
70
|
|
|
if($testIP === $ip || $testIP === '*') { |
|
71
|
|
|
return true; |
|
72
|
|
|
} |
|
73
|
|
|
} |
|
74
|
|
|
} |
|
75
|
|
|
} |
|
76
|
|
|
return Permission::check('ADMIN'); |
|
77
|
|
|
} |
|
78
|
|
|
} |
|
79
|
|
|
|
sunnysideup /
silverstripe-ecommerce_second_hand_product
Loading history...
You can fix this by adding a namespace to your class:
When choosing a vendor namespace, try to pick something that is not too generic to avoid conflicts with other libraries.