File manager - Edit - /home/webapp69.cm.in.th/u69319090017/shop17/app/Http/Middleware/VerifyShopOwnership.php
Back
<?php namespace App\Http\Middleware; use Closure; use Illuminate\Http\Request; use Symfony\Component\HttpFoundation\Response; class VerifyShopOwnership { /** * Handle an incoming request. */ public function handle(Request $request, Closure $next): Response { $user = $request->user(); if (!$user || !$user->isSeller()) { return response()->json(['message' => 'Unauthorized. Must be a seller.'], 403); } // Get shop from route parameter or query/post body $shopId = $request->route('shop') ?? $request->input('shop_id'); if ($shopId) { $shop = $user->shop; if (!$shop || $shop->id != $shopId) { return response()->json(['message' => 'Forbidden. You do not own this shop.'], 403); } } return $next($request); } }
| ver. 1.4 |
Github
|
.
| PHP 7.4.33 | Generation time: 0.25 |
proxy
|
phpinfo
|
Settings