php - 2个复选框之间的链接问题，在不应该插入数据时插入数据

Question

我需要列出一些输入(复选框)中的所有模式，然后我们可以选择我们想要操作的模式，以便为特定用户授予权限。

无论如何，如您所见，我明白了:

<div id="list-schemas">
    <?php
        foreach ($schemas as $elt) {
        echo '<input type="checkbox" name="schemas[]" value="' . $elt->getSchema() . '"/>' . $elt->getSchema() . '<br />';
        }
    ?>
</div>

然后，我还需要添加一些具有权限的复选框，我这样做了:

<div id="div-privileges">
    <?php
        foreach ($schemas as $elt) {
            echo '<div class="list">';
            echo '<label for="list">' . $elt->getSchema() . ' :</label><br />';
            echo '<input type="checkbox" name="privileges[' . $elt->getSchema() . '][]" value="REVOKE"/> REVOKE ? <br />';
            echo '<input type="checkbox" name="privileges[' . $elt->getSchema() . '][]" value="ALL"/> ALL PRIVILEGES ? <br />';
            echo '<hr>';
            echo '<input type="checkbox" name="privileges[' . $elt->getSchema() . '][]" value="SELECT"/> SELECT ? <br />';
            echo '<input type="checkbox" name="privileges[' . $elt->getSchema() . '][]" value="INSERT"/> INSERT ? <br />';
            echo '<input type="checkbox" name="privileges[' . $elt->getSchema() . '][]" value="UPDATE"/> UPDATE ?  <br />';
            echo '<input type="checkbox" name="privileges[' . $elt->getSchema() . '][]" value="DELETE"/> DELETE ?  <br />';
            echo '<hr>';
            echo '<input type="checkbox" name="privileges[' . $elt->getSchema() . '][]" value="CREATE"/>CREATE ?  <br />';
            echo '</div>';
        }
    ?>
</div>

看起来像这样:https://image.noelshack.com/fichiers/2019/37/3/1568191628-capture2.png

所以，这就是说，这是我的 UserManager.class.php 中的函数更新:

public static function update(User $newPerso){

    $db = DbConnect::getDb();
    $newLogin= pg_escape_string($newPerso->getLogin());
    $arraySchemas=$newPerso->getSchemas();
    $arrayPrivileges=$newPerso->getPrivileges();

    if (isset($arraySchemas)){

        foreach($arrayPrivileges as $schema => $privileges){

            if (isset($arrayPrivileges)){

                foreach($privileges as $privilege){

                    if($privilege=="REVOKE"){
                        pg_query("{$privilege} ALL ON ALL TABLES IN SCHEMA {$schema} FROM {$newLogin};");
                    }

                    else if($privilege=="CREATE"){
                        pg_query("GRANT {$privilege} ON SCHEMA {$schema} TO {$newLogin};");
                    }

                    else if($privilege=="ALL" || $privilege=="INSERT" || $privilege=="SELECT" || $privilege=="UPDATE" || $privilege=="DELETE"){
                        pg_query("GRANT {$privilege} ON ALL TABLES IN SCHEMA {$schema} TO {$newLogin};");
                    }
                }
            }
        }
    }
}

事实是，当我这样做时:https://image.noelshack.com/fichiers/2019/37/3/1568193038-capture3.png

有效，用户将在“public”上有 SELECT + INSERT，在“schematest”上有 UPDATE + DELETE

但是，

当我这样做时:https://image.noelshack.com/fichiers/2019/37/3/1568186255-capture.png

我的用户将拥有(在该示例中):

这两个模式中的所有权限...

它适用于“公共(public)”是正常的，但我如何防止“schematest”..？

Answer 1

伙计们，我添加了一个“&& in_array($schema, $arraySchemas)”

它现在似乎可以工作了，让我告诉你:

public static function update(User $newPerso){

    $db = DbConnect::getDb();
    $newLogin= pg_escape_string($newPerso->getLogin());
    $arraySchemas=$newPerso->getSchemas();
    $arrayPrivileges=$newPerso->getPrivileges();

    if (isset($arraySchemas)){

        foreach($arrayPrivileges as $schema => $privileges){

            if (isset($arrayPrivileges) && in_array($schema, $arraySchemas)){ /****<- RIGHT HERE****/

                foreach($privileges as $privilege){

                    if($privilege=="REVOKE"){
                        pg_query("{$privilege} ALL ON ALL TABLES IN SCHEMA {$schema} FROM {$newLogin};");
                    }

                    else if($privilege=="CREATE"){
                        pg_query("GRANT {$privilege} ON SCHEMA {$schema} TO {$newLogin};");
                        pg_query("GRANT USAGE ON SCHEMA {$schema} TO {$newLogin};");  
                    }

                    else if($privilege=="ALL" || $privilege=="INSERT" || $privilege=="SELECT" || $privilege=="UPDATE" || $privilege=="DELETE"){
                        pg_query("GRANT {$privilege} ON ALL TABLES IN SCHEMA {$schema} TO {$newLogin};");
                        pg_query("GRANT USAGE ON SCHEMA {$schema} TO {$newLogin};"); 
                    }
                }
            }
        }
    }
}