diff --git a/src/app/parameter/controllers/ParameterController.php b/src/app/parameter/controllers/ParameterController.php index 139f458f5781d79ba0bbdf7ac7e6c4d79bf39ae4..02b90342e4a18e241ad1ef4925d34dfe454928bf 100755 --- a/src/app/parameter/controllers/ParameterController.php +++ b/src/app/parameter/controllers/ParameterController.php @@ -104,7 +104,7 @@ class ParameterController $tmpPath = CoreConfigModel::getTmpPath(); if ($args['id'] == 'logo') { - if (strpos($body['image'], 'data:image/jpeg;base64,') === false) { + if (strpos($body['image'], 'data:image/svg+xml;base64,') === false) { return $response->withStatus(400)->withJson(['errors' => 'Body image is not a base64 image']); } $tmpFileName = $tmpPath . 'parameter_logo_' . rand() . '_file.svg'; @@ -134,8 +134,16 @@ class ParameterController return $response->withStatus(400)->withJson(['errors' => 'Body size is not allowed']); } copy($tmpFileName, "custom/{$customId}/img/bodylogin.jpg"); + } elseif ($args['id'] == 'applicationName') { + $config = CoreConfigModel::getJsonLoaded(['path' => 'apps/maarch_entreprise/xml/config.json']); + $config['config']['applicationName'] = $body['applicationName']; + $fp = fopen("custom/{$body['customId']}/apps/maarch_entreprise/xml/config.json", 'w'); + fwrite($fp, json_encode($config, JSON_PRETTY_PRINT)); + fclose($fp); + } + if (!empty($tmpFileName) && is_file($tmpFileName)) { + unset($tmpFileName); } - unset($tmpFileName); return $response->withStatus(204); } diff --git a/src/app/user/controllers/UserController.php b/src/app/user/controllers/UserController.php index 071f4d7c15cc4b6177b4836b959657a8da1bdd46..e8f013f79efc2c217eb6defaeb9b15a0f33f0f12 100755 --- a/src/app/user/controllers/UserController.php +++ b/src/app/user/controllers/UserController.php @@ -288,7 +288,7 @@ class UserController if ($body['mode'] == 'rest' && isset($body['authorizedApi']) && is_array($body['authorizedApi'])) { foreach ($body['authorizedApi'] as $value) { - if (strpos($value, 'GET') !== 0 && strpos($value, 'POST') !== 0 && strpos($value, 'PUT') !== 0 && strpos($value, 'DELETE') !== 0) { + if (strpos($value, 'GET/') !== 0 && strpos($value, 'POST/') !== 0 && strpos($value, 'PUT/') !== 0 && strpos($value, 'DELETE/') !== 0) { return $response->withStatus(400)->withJson(['errors' => 'Body authorizedApi is not well formatted']); } }