fernando/luos
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

BUG-15029 Improvement called function Rename Folder broked the security

Browse Source
This commit is contained in:
Marco Antonio Nina
2014-06-12 13:46:14 -04:00
parent e00933ab63
commit 4143147bd6
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
workflow/engine/methods/appFolder/appFolderAjax.php
View File

@@ -21,6 +21,8 @@ if (! isset ($_REQUEST ['action'])) {
die (); die ();
} }
$_REQUEST['action'] = ($_REQUEST['action'] == 'rename') ? 'renameFolder' : $_REQUEST['action'];
if (! function_exists ($_REQUEST['action']) || !G::isUserFunction($_REQUEST['action'])) { if (! function_exists ($_REQUEST['action']) || !G::isUserFunction($_REQUEST['action'])) {
$res ['success'] = false; $res ['success'] = false;
$res ['message'] = 'The requested action does not exist'; $res ['message'] = 'The requested action does not exist';
@@ -28,7 +30,7 @@ if (! function_exists ($_REQUEST['action']) || !G::isUserFunction($_REQUEST['act
die (); die ();
} }
if (($_REQUEST['action']) != 'rename') { if (($_REQUEST['action']) != 'renameFolder') {
$functionName = $_REQUEST ['action']; $functionName = $_REQUEST ['action'];
$functionParams = isset ($_REQUEST ['params']) ? $_REQUEST ['params'] : array (); $functionParams = isset ($_REQUEST ['params']) ? $_REQUEST ['params'] : array ();