protect some fields from being edit when subscribing

This commit is contained in:
Jonathan Labreuille
2016-11-14 15:20:18 +01:00
parent 02221f6833
commit 3865a8e8cd
2 changed files with 54 additions and 0 deletions

View File

@ -156,6 +156,24 @@ class Subscriber extends Model {
}
static function subscribe($subscriber_data = array(), $segment_ids = array()) {
// filter out keys from the subscriber_data array
// that should not be editable when subscribing
$reserved_columns = array(
'id',
'wp_user_id',
'status',
'subscribed_ip',
'confirmed_ip',
'confirmed_at',
'created_at',
'updated_at',
'deleted_at'
);
$subscriber_data = array_diff_key(
$subscriber_data,
array_flip($reserved_columns)
);
$signup_confirmation_enabled = (bool)Setting::getValue(
'signup_confirmation.enabled'
);