game - string as puzzle number error handling

2022-11-10 09:00:23 +01:00
parent d20e3a03bf
commit 8b02a698d5
1 changed files with 4 additions and 0 deletions
--- a/picquiz/app/Http/Controllers/GameController.php
+++ b/picquiz/app/Http/Controllers/GameController.php
@ -37,6 +37,10 @@ class GameController extends Controller
    }

 	public function play($id, $puzzle){
+		$puzzle = (int)$puzzle;
+		if($puzzle == 0){
+			abort(404);
+		}
 		$p = DB::table('game_puzzles')->join('puzzles', 'puzzle_id', '=', 'puzzles.id')->get()->where('game_id', $id)->values()->get($puzzle-1);
 		if($p == NULL){
 			return abort(404);