BUG 13436 ProcessMaker 2.x Authenticated PHP Code Execution IMPROVEMENT
This commit is contained in:
@@ -6,7 +6,7 @@ if (! isset( $_REQUEST['action'] )) {
|
|||||||
print G::json_encode( $res );
|
print G::json_encode( $res );
|
||||||
die();
|
die();
|
||||||
}
|
}
|
||||||
if (! function_exists( $_REQUEST['action'] )) {
|
if (! function_exists( $_REQUEST['action'] ) || !G::isUserFunction($_REQUEST['action'])) {
|
||||||
$res['success'] = false;
|
$res['success'] = false;
|
||||||
$res['error'] = $res['message'] = G::LoadTranslation('ID_REQUEST_ACTION_NOT_EXIST');
|
$res['error'] = $res['message'] = G::LoadTranslation('ID_REQUEST_ACTION_NOT_EXIST');
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user