Yii:禁用直接访问控制器/动作，只有路由到才有效 - Yii: Disable direct access to Controller/Action, only valid if routed to

Yii: Disable direct access to Controller/Action, only valid if routed to

我想在Yii框架中禁用对Controller/Action的直接访问，例如login/get，只有通过CUrlManager路由才能访问。

在我的配置中，我将登录的请求路由到login/get和login/post，这取决于HTTP方法:

'urlManager' => array(
    'urlFormat' => 'path',
    'showScriptName' => false,
    'caseSensitive' => false,
    'rules' => array(
        // Rewrite GET requests of "login" to "login/get", and POST requests to "login/post".
        array('login/post', 'pattern' => 'login', 'caseSensitive' => false, 'verb' => 'POST'),
        array('login/get',  'pattern' => 'login', 'caseSensitive' => false, 'verb' => 'GET'),
    ),
),

是否有任何配置设置来禁止请求login/get和login/post，或者最好的方法是将这些请求路由到诸如error/404的地方?例如:

array('error/404',  'pattern' => 'login/(get|post)(/.*)?')

你自己的解决方案很好，UrlManager从上到下请求规则，所以它会先尝试GET/POST

所以完整的答案应该是

'rules' => array(
    // Rewrite GET requests of "login" to "login/get", and POST requests to "login/post".
    array('login/post', 'pattern' => 'login', 'caseSensitive' => false, 'verb' => 'POST'),
    array('login/get',  'pattern' => 'login', 'caseSensitive' => false, 'verb' => 'GET'),
    'login/post'=>'error/404',
    'login/get'=>'error/404',
),

你可以直接用正则表达式

array('error/404',  'pattern' => 'login/(get|post)(/.*)?'