diff --git a/htdocs/public/eventorganization/attendee_subscription.php b/htdocs/public/eventorganization/attendee_subscription.php index a81ac456353..96dd77bce74 100644 --- a/htdocs/public/eventorganization/attendee_subscription.php +++ b/htdocs/public/eventorganization/attendee_subscription.php @@ -115,6 +115,11 @@ $extrafields = new ExtraFields($db); $user->loadDefaultValues(); +// Security check +if (empty($conf->eventorganization->enabled)) { + accessforbidden('', 0, 0, 1); +} + /** * Show header for new member diff --git a/htdocs/public/eventorganization/subscriptionok.php b/htdocs/public/eventorganization/subscriptionok.php index 8586535f5ab..b45e98b832a 100644 --- a/htdocs/public/eventorganization/subscriptionok.php +++ b/htdocs/public/eventorganization/subscriptionok.php @@ -66,7 +66,7 @@ $object = new stdClass(); // For triggers $error = 0; // Security check -$id = GETPOST("id"); +$id = GETPOST("id", 'int'); $securekeyreceived = GETPOST("securekey"); $securekeytocompare = dol_hash($conf->global->EVENTORGANIZATION_SECUREKEY.'conferenceorbooth'.$id, 2); @@ -75,6 +75,12 @@ if ($securekeyreceived != $securekeytocompare) { exit; } +// Security check +if (empty($conf->eventorganization->enabled)) { + accessforbidden('', 0, 0, 1); +} + + /* * Actions */ diff --git a/htdocs/public/project/index.html b/htdocs/public/project/index.html deleted file mode 100644 index 8b137891791..00000000000 --- a/htdocs/public/project/index.html +++ /dev/null @@ -1 +0,0 @@ - diff --git a/htdocs/public/project/suggestbooth.php b/htdocs/public/project/suggestbooth.php index 77d3873511a..f5ef237a9bd 100644 --- a/htdocs/public/project/suggestbooth.php +++ b/htdocs/public/project/suggestbooth.php @@ -115,6 +115,11 @@ $user->loadDefaultValues(); $cactioncomm = new CActionComm($db); $arrayofeventtype = $cactioncomm->liste_array('', 'id', '', 0, 'module=\'booth@eventorganization\''); +// Security check +if (empty($conf->eventorganization->enabled)) { + accessforbidden('', 0, 0, 1); +} + /** * Show header for new member diff --git a/htdocs/public/project/suggestconference.php b/htdocs/public/project/suggestconference.php index 45dbaf80656..4ef1784e2a7 100644 --- a/htdocs/public/project/suggestconference.php +++ b/htdocs/public/project/suggestconference.php @@ -115,6 +115,11 @@ $user->loadDefaultValues(); $cactioncomm = new CActionComm($db); $arrayofeventtype = $cactioncomm->liste_array('', 'id', '', 0, 'module=\'conference@eventorganization\''); +// Security check +if (empty($conf->eventorganization->enabled)) { + accessforbidden('', 0, 0, 1); +} + /** * Show header for new member diff --git a/htdocs/public/project/viewandvote.php b/htdocs/public/project/viewandvote.php index 9252a7ac50f..64307018c38 100644 --- a/htdocs/public/project/viewandvote.php +++ b/htdocs/public/project/viewandvote.php @@ -89,6 +89,11 @@ if ($resultproject < 0) { $errmsg .= $project->error; } +// Security check +if (empty($conf->eventorganization->enabled)) { + accessforbidden('', 0, 0, 1); +} + /* * Actions