BUG 13436 ProcessMaker 2.x Authenticated PHP Code Execution IMPROVEMENT

This commit is contained in:
Julio Cesar Laura
2014-05-07 16:49:51 -04:00
parent d61d3ed57b
commit 05b4e999bb

View File

@@ -6,7 +6,7 @@ if (! isset( $_REQUEST['action'] )) {
print G::json_encode( $res ); print G::json_encode( $res );
die(); die();
} }
if (! function_exists( $_REQUEST['action'] )) { if (! function_exists( $_REQUEST['action'] ) || !G::isUserFunction($_REQUEST['action'])) {
$res['success'] = false; $res['success'] = false;
$res['error'] = $res['message'] = G::LoadTranslation('ID_REQUEST_ACTION_NOT_EXIST'); $res['error'] = $res['message'] = G::LoadTranslation('ID_REQUEST_ACTION_NOT_EXIST');