lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix missing protection on ajax public ticket page

Browse Source
This commit is contained in:
Laurent Destailleur 2023-02-21 20:47:35 +01:00
parent dd6e2821bc
commit 0703645304
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
htdocs/public/ticket/ajax/ajax.php
View File

@ -57,6 +57,14 @@ $action = GETPOST('action', 'aZ09');
$id = GETPOST('id', 'int'); $id = GETPOST('id', 'int');
$email = GETPOST('email', 'alphanohtml'); $email = GETPOST('email', 'alphanohtml');
if (!isModEnabled('ticket')) {
httponly_accessforbidden('Module Ticket not enabled');
}
if (empty($conf->global->TICKET_CREATE_THIRD_PARTY_WITH_CONTACT_IF_NOT_EXIST)) {
httponly_accessforbidden('Option TICKET_CREATE_THIRD_PARTY_WITH_CONTACT_IF_NOT_EXIST of module ticket is not enabled');
}
/* /*
* View * View