Sort parameters

Author: givanz

admin/component/orders.php

@@ -29,17 +29,19 @@
 
 class Orders extends ComponentBase {
 	public static $defaultOptions = [
-		'start'              => 0,
-		'limit'              => 10,
-		'language_id'        => NULL,
-		'site_id'            => NULL,
-		'user_id'            => NULL,
-		'email'              => NULL,
-		'phone_number'       => NULL,
-		'search'             => NULL,
-		'id_manufacturer'    => NULL,
-		'order_status'       => NULL,
-		'order_status_id'    => NULL,
+		'start'           => 0,
+		'limit'           => 10,
+		'language_id'     => NULL,
+		'site_id'         => NULL,
+		'user_id'         => NULL,
+		'email'           => NULL,
+		'phone_number'    => NULL,
+		'search'          => NULL,
+		'id_manufacturer' => NULL,
+		'order_status'    => NULL,
+		'order_status_id' => NULL,
+		'order_by'        => NULL,
+		'direction'       => ['url', 'asc', 'desc'],
 	];
 
 	public $options = [];
@@ -49,6 +51,16 @@ function results() {
 
 		$results = $orders->getAll($this->options);
 
+		if (isset($this->options['order_by']) &&
+				! in_array($this->options['order_by'], ['order_id', 'customer_order_id', 'order_status_id', 'created_at'])) {
+			unset($this->options['order_by']);
+		}
+
+		if (isset($this->options['direction']) &&
+				! in_array($this->options['direction'], ['asc', 'desc'])) {
+			unset($this->options['direction']);
+		}
+
 		if ($results['order']) {
 			$currency = Currency::getInstance();
 

admin/component/users.php

@@ -29,12 +29,13 @@
 
 class Users extends ComponentBase {
 	public static $defaultOptions = [
-		'start'           => 0,
-		'limit'           => 10,
-		'site_id'         => null,
-		'user_id'         => 'url',
-		'user'            => ['url', 'price asc'],
-		'id'              => NULL,
+		'start'            => 0,
+		'limit'            => 10,
+		'site_id'          => null,
+		'user_id'          => 'url',
+		'user'             => ['url', 'price asc'],
+		'order_by'         => NULL,
+		'direction'        => ['url', 'asc', 'desc'],
 	];
 
 	public $options = [];
@@ -44,6 +45,16 @@ function results() {
 
 		$results = $users->getAll($this->options);
 
+		if (isset($this->options['order_by']) &&
+				! in_array($this->options['order_by'], ['user_id', 'created_at', 'email', 'username'])) {
+			unset($this->options['order_by']);
+		}
+
+		if (isset($this->options['direction']) &&
+				! in_array($this->options['direction'], ['asc', 'desc'])) {
+			unset($this->options['direction']);
+		}
+
 		if (isset($results['user'])) {
 			foreach ($results['user'] as $id => &$user) {
 				if (isset($user['images'])) {