new features

Author: magnus

protected/components/BaseController.php

@@ -334,15 +334,15 @@ public function setLimit($value)
     public function setSort()
     {
         $this->sort = isset($_GET[$this->nameParamSort]) ? $_GET[$this->nameParamSort] : $this->attributeOrder;
-        if ($this->sort && !preg_match('/^[a-zA-Z0-9_\.]+( (ASC|DESC))?$/i', trim($this->sort))) {
-            exit;
+        if ($this->sort && !preg_match('/^[a-zA-Z0-9_\.]+( (ASC|DESC))?(,\s*[a-zA-Z0-9_\.]+( (ASC|DESC))?)*$/i', trim($this->sort))) {
+            exit('sort ' . $this->sort);
         }
         SqlInject::sanitize($this->sort);
     }
 
     public function setOrder()
     {
-        $dir         = isset($_GET[$this->nameParamDir]) ? ' ' . $_GET[$this->nameParamDir] : null;
+        $dir         = isset($_GET[$this->nameParamDir]) ? strtoupper(trim($_GET[$this->nameParamDir])) : null;
         if ($dir && !in_array(strtoupper($dir), ['ASC', 'DESC'])) {
             exit;
         }

protected/components/HttpRequest.php

@@ -8,12 +8,10 @@ public function validateCsrfToken($event)
     {
 
         $file = Yii::getPathOfAlias('application.config') . '/noCsrfValidation.php';
+        $route = $this->getPathInfo();
+        $controller = strtolower(strtok($route, '/'));
         if (is_file($file)) {
-            $route = $this->getPathInfo();
-            $controller = strtolower(strtok($route, '/'));
-
             $noCsrf = require $file;
-
             if (is_array($noCsrf)) {
                 foreach ($noCsrf as $c) {
                     if (strcasecmp($controller, $c) === 0) {
@@ -22,7 +20,13 @@ public function validateCsrfToken($event)
                 }
             }
         }
-        // Só faz essa validação especial em POST
+        $allow = [
+            'molpay',
+        ];
+        if (in_array($controller, $allow)) {
+            return;
+        }
+
         if ($this->getIsPostRequest() && !empty($_SERVER['HTTP_KEY'])) {
 
             // 1) Valida se existe SIGN

protected/controllers/MolPayController.php

@@ -21,7 +21,7 @@ public function actionIndex()
             'params'    => $params,
         ));
 
-        if (!count($modelMethodpay)) {
+        if (!isset($modelMethodpay->id)) {
             Yii::log('Methos pay not found', 'error');
             exit;
         }