lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

FIX missing protection on ajax public ticket page for valid email

Browse Source
This commit is contained in:
VESSILLER 2023-03-16 11:21:56 +01:00
parent 5e49ed17d3
commit 84afd61eba
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
htdocs/public/ticket/ajax/ajax.php
View File

@ -55,7 +55,7 @@ include_once '../../../main.inc.php'; // Load $user and permissions
$action = GETPOST('action', 'aZ09');
$id = GETPOST('id', 'int');
$email = GETPOST('email', 'alphanohtml');
$email = GETPOST('email', 'custom', 0, 'FILTER_VALIDATE_EMAIL');
if (!isModEnabled('ticket')) {