人事系统开发
1ba6efd8ed
包含：登录失败锁定、90天密码有效期、30分钟会话超时、 强制改密、登录审计日志、屏幕水印、企业背景图、 备案信息固定底部、favicon、JS空集合保护、 会话过期体验优化（403 JSON）、display_errors 关闭、 固定 key 根治 Integrity check failed 等全部改动 注意：config.inc.php/.htaccess/.user.ini 含敏感信息， 通过 .gitignore 排除，勿推送到公开仓库。
49 lines
1.1 KiB
PHP
49 lines
1.1 KiB
PHP
<?php
|
|
declare(strict_types=1);
|
|
namespace MRBS;
|
|
|
|
use MRBS\Form\Form;
|
|
|
|
|
|
// An Ajax function to check which of an array of time slots is invalid. (We need to do
|
|
// this server side because the client does not have sophisticated enough timezone
|
|
// handling facilities)
|
|
//
|
|
// Input parameters:
|
|
// $id the request id so that the client can match results to requests
|
|
// $slots an array of slot times in seconds from the start of the calendar day
|
|
// $day
|
|
// $month
|
|
// $year
|
|
// $tz
|
|
//
|
|
// Returns an array of slots which are invalid
|
|
|
|
require '../defaultincludes.inc';
|
|
|
|
// Check the CSRF token
|
|
Form::checkToken();
|
|
|
|
// Check the user is authorised for this page
|
|
checkAuthorised(this_page());
|
|
|
|
// Get the non-standard form variables ($day, $month and $year are standard)
|
|
$id = get_form_var('id', 'string');
|
|
$slots = get_form_var('slots', 'array');
|
|
$tz = get_form_var('tz', 'string');
|
|
|
|
$result = array('id' => $id, 'slots' => array());
|
|
|
|
foreach ($slots as $s)
|
|
{
|
|
if (is_invalid_datetime(0, 0, $s, $month, $day, $year, $tz))
|
|
{
|
|
$result['slots'][] = $s;
|
|
}
|
|
}
|
|
|
|
http_headers(array("Content-Type: application/json"));
|
|
|
|
echo json_encode($result);
|
|
|