Security hardening: fixed 13 vulnerabilities, added AI-powered SupportController (Gemini), and stabilized Flutter Complaint logic
This commit is contained in:
@@ -505,11 +505,18 @@ class RideController extends Controller
|
||||
* GET /v2/rides/{id}
|
||||
* Replaces: ride/rides/getRideOrderID.php
|
||||
*/
|
||||
public function show(int $rideId): JsonResponse
|
||||
public function show(Request $request, int $rideId): JsonResponse
|
||||
{
|
||||
$ride = Ride::find($rideId);
|
||||
$userId = $request->attributes->get('_jwt_user_id');
|
||||
$ride = Ride::where('id', $rideId)
|
||||
->where(function($q) use ($userId) {
|
||||
$q->where('passenger_id', $userId)
|
||||
->orWhere('driver_id', $userId);
|
||||
})
|
||||
->first();
|
||||
|
||||
if (!$ride) {
|
||||
return response()->json(['status' => 'failure', 'message' => 'Ride not found'], 404);
|
||||
return response()->json(['status' => 'failure', 'message' => 'Ride not found or access denied'], 404);
|
||||
}
|
||||
return response()->json(['status' => 'success', 'data' => $ride]);
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user