check for key param

ppy · Feb 10, 2025 · 0deda4e · 0deda4e
1 parent 4bd31dd
commit 0deda4e
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/app/Console/Commands/StoreGetShopifyOrder.php b/app/Console/Commands/StoreGetShopifyOrder.php
@@ -13,6 +13,7 @@
 use Shopify\Auth\FileSessionStorage;
 use Shopify\Clients\Storefront;
 use Shopify\Context;
+use Shopify\Utils;
 
 class StoreGetShopifyOrder extends Command
 {
@@ -75,8 +76,14 @@ public function handle()
             return static::INVALID;
         }
 
-        $gid = $order->reference;
         $this->info("Getting details for Order {$order->getKey()}");
+
+        $gid = $order->reference;
+        if (!isset(Utils::getQueryParams($gid)['key'])) {
+            $this->error('Missing key param in id for querying');
+            return static::INVALID;
+        }
+
         $this->warn('The id and statusUrl returned are private and should not be shared!');
 
         if (str_starts_with($gid, 'gid://shopify/Checkout')) {