Resolvendo [#213]

nilsonLazarin · Jun 6, 2024 · 402e9fa · 402e9fa
1 parent bf20a77
commit 402e9fa
Showing 1 changed file with 19 additions and 4 deletions.
diff --git a/html/socio/sistema/controller/deletar_socios.php b/html/socio/sistema/controller/deletar_socios.php
@@ -1,15 +1,30 @@
 <?php
     require("../../conexao.php");
+
     $resultado = false;
-    if(isset($_REQUEST['chave'])){
-        $chave = $_REQUEST['chave'];
-        if($chave === "h)8^#w4T<HaN-GSc&BM3[<?mvG[R?b"){
+    $chave_correta = "h)8^#w4T<HaN-GSc&BM3[<?mvG[R?b";
+
+    if(isset($_GET['chave'])){
+        $chave = $_GET['chave'];
+
+        $chave_hash = hash('sha256', $chave);
+        $chave_correta_hash = hash('sha256', $chave_correta);
+
+        if($chave_hash === $chave_correta_hash){
             $tabelas = array("endereco","pessoafisica","pessoajuridica","socio");
             $i = 0;
             mysqli_query($conexao,"SET FOREIGN_KEY_CHECKS=0");
             foreach ($tabelas as $n => $tabela) {
-                $r_query = mysqli_query($conexao, "TRUNCATE TABLE $tabela");
+                $verif_tabela = mysqli_real_escape_string($conexao, $tabela);
+
+                $r_query = mysqli_query($conexao, "TRUNCATE TABLE $verif_tabela");
                 if(mysqli_affected_rows($conexao)) $i++;
+
+                if (!$r_query) {
+                    $resultado = false;
+                    mysqli_query($conexao, "SET FOREIGN_KEY_CHECKS=1");
+                    die(json_encode($resultado));
+                }
             }
             $resultado = true;
             mysqli_query($conexao,"SET FOREIGN_KEY_CHECKS=1");