Ticket #105: protect_filters.diff

trax/vendor/trax/action_controller.php

@@ -650 +650 @@
-                # Call the controller method based on the URL
-                if($this->controller_object->execute_before_filters()) {
-                   
-
+ && !$this->controller_object->my_is_filter($this->action)
-                        //error_log('method '.$this->action.' exists, calling it');
-                        $action = $this->action;
-                        //error_log('calling action routine '
@@ -784 +784 @@
-        }
-    }
-
+
-    /**
+     *  Check if specific method is a filter
+     *  @uses $before_filters
+     *  @uses $after_filters
+     */
+    function my_is_filter($method) {
+        $before = array_search($method, $this->before_filters);
+        $after = array_search($method, $this->after_filters);
+        return ($before === false && $after === false) ? false : true ;
+    }
+
+    /**
-     *  Execute the before filters
-     *  @uses $before_filters
-     */