- Restricts router access to explicitly defined endpoint actions

2016-08-24 11:23:12 -04:00
parent a8f4779bfe
commit ae6269eb63
5 changed files with 18 additions and 4 deletions
--- a/lib/Router/Endpoints/Track.php
+++ b/lib/Router/Endpoints/Track.php
@@ -14,6 +14,10 @@ class Track {
  const ENDPOINT = 'track';
  const ACTION_CLICK = 'click';
  const ACTION_OPEN = 'open';
+  public $allowed_actions = array(
+    self::ACTION_CLICK,
+    self::ACTION_OPEN
+  );

  function click($data) {
    $click_event = new Clicks();