From 4143147bd6f5a8a159149c4c8d1e2771bb805bcc Mon Sep 17 00:00:00 2001
From: Marco Antonio Nina <marcoantonionina@colosa.com>
Date: Thu, 12 Jun 2014 13:46:14 -0400
Subject: [PATCH] BUG-15029 Improvement called function Rename Folder broked
 the security

---
 workflow/engine/methods/appFolder/appFolderAjax.php | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/workflow/engine/methods/appFolder/appFolderAjax.php b/workflow/engine/methods/appFolder/appFolderAjax.php
index f85f09506..33562388a 100755
--- a/workflow/engine/methods/appFolder/appFolderAjax.php
+++ b/workflow/engine/methods/appFolder/appFolderAjax.php
@@ -21,6 +21,8 @@ if (! isset ($_REQUEST ['action'])) {
     die ();
 }
 
+$_REQUEST['action'] = ($_REQUEST['action'] == 'rename') ? 'renameFolder' : $_REQUEST['action'];
+
 if (! function_exists ($_REQUEST['action']) || !G::isUserFunction($_REQUEST['action'])) {
     $res ['success'] = false;
     $res ['message'] = 'The requested action does not exist';
@@ -28,7 +30,7 @@ if (! function_exists ($_REQUEST['action']) || !G::isUserFunction($_REQUEST['act
     die ();
 }
 
-if (($_REQUEST['action']) != 'rename') {
+if (($_REQUEST['action']) != 'renameFolder') {
     $functionName = $_REQUEST ['action'];
     $functionParams = isset ($_REQUEST ['params']) ? $_REQUEST ['params'] : array ();