fernando/luos
1
0
Fork 0
Code Releases Activity

Merge pull request #2447 from marcoAntonioNina/BUG-15029

Browse Source 
BUG-15029 Improvement called function Rename Folder broked the security
This commit is contained in:
julceslauhub
2014-06-12 14:19:33 -04:00
parent 0dd999869c 4143147bd6
commit 0c2a63456d
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
workflow/engine/methods/appFolder/appFolderAjax.php
View File

@@ -21,6 +21,8 @@ if (! isset ($_REQUEST ['action'])) {
die ();
}
$_REQUEST['action'] = ($_REQUEST['action'] == 'rename') ? 'renameFolder' : $_REQUEST['action'];
if (! function_exists ($_REQUEST['action']) || !G::isUserFunction($_REQUEST['action'])) {
$res ['success'] = false;
$res ['message'] = 'The requested action does not exist';
@@ -28,7 +30,7 @@ if (! function_exists ($_REQUEST['action']) || !G::isUserFunction($_REQUEST['act
die ();
}
if (($_REQUEST['action']) != 'rename') {
if (($_REQUEST['action']) != 'renameFolder') {
$functionName = $_REQUEST ['action'];
$functionParams = isset ($_REQUEST ['params']) ? $_REQUEST ['params'] : array ();