fs
d9805c45d3
Fix broken tests (H1), align interface signatures with implementations (H3), remove dead code (H4), add missing input guard (M1), replace raw $_SESSION access with SessionStoreInterface (M2), sync update script schema (M4), use shared getAppBase utility (L2), document fragment stripping (L3), and apply app- CSS class prefix convention (L5). Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
56 lines
1.4 KiB
PHP
56 lines
1.4 KiB
PHP
<?php
|
|
|
|
use MintyPHP\Http\SessionStoreInterface;
|
|
use MintyPHP\Router;
|
|
use MintyPHP\Service\Bookmark\BookmarkService;
|
|
use MintyPHP\Session;
|
|
use MintyPHP\Support\Guard;
|
|
|
|
Guard::requireLogin();
|
|
|
|
if (requestInput()->method() !== 'POST') {
|
|
http_response_code(405);
|
|
Router::json(['ok' => false, 'error' => 'method_not_allowed']);
|
|
return;
|
|
}
|
|
|
|
if (!Session::checkCsrfToken()) {
|
|
http_response_code(403);
|
|
Router::json(['ok' => false, 'error' => 'csrf']);
|
|
return;
|
|
}
|
|
|
|
$session = app(SessionStoreInterface::class)->all();
|
|
$userId = (int) ($session['user']['id'] ?? 0);
|
|
if ($userId <= 0) {
|
|
http_response_code(401);
|
|
Router::json(['ok' => false, 'error' => 'unauthorized']);
|
|
return;
|
|
}
|
|
|
|
$bookmarkId = (int) requestInput()->body('id');
|
|
if ($bookmarkId <= 0) {
|
|
http_response_code(400);
|
|
Router::json(['ok' => false, 'error' => 'invalid_bookmark_id']);
|
|
return;
|
|
}
|
|
|
|
$data = [];
|
|
if (requestInput()->body('name') !== null) {
|
|
$data['name'] = (string) requestInput()->body('name');
|
|
}
|
|
if (requestInput()->body('group_id') !== null) {
|
|
$data['group_id'] = requestInput()->body('group_id');
|
|
}
|
|
|
|
$service = app(BookmarkService::class);
|
|
$result = $service->updateBookmark($userId, $bookmarkId, $data);
|
|
|
|
if ($result['ok']) {
|
|
app(SessionStoreInterface::class)->set('user_bookmarks', $service->listGroupedForUser($userId));
|
|
} else {
|
|
http_response_code(400);
|
|
}
|
|
|
|
Router::json($result);
|