From ca1e02c32bceac471f0a6ed9e0dd5a394bdb2a30 Mon Sep 17 00:00:00 2001
From: Victor Saisa Lopez <victor@colosa.com>
Date: Mon, 5 Aug 2013 16:40:33 -0400
Subject: [PATCH] BUG 12475 "Request for the SYSGENERIC (Possible bug?)" SOLVED

- When data is sending by the URI, the path no is valid
- Solved problem, add validation when data is sending with URI

* Available from version ProcessMaker-2.5.2-testing.1
---
 workflow/public_html/sysGeneric.php | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/workflow/public_html/sysGeneric.php b/workflow/public_html/sysGeneric.php
index 89dd28dbd..4f5f50af4 100755
--- a/workflow/public_html/sysGeneric.php
+++ b/workflow/public_html/sysGeneric.php
@@ -408,7 +408,9 @@ if (Bootstrap::virtualURI( $_SERVER['REQUEST_URI'], $virtualURITable, $realPath
 
         //Get that path in array
         $paths = explode( PATH_SEP, $forQuery[0] );
-        $fileToBeStreamed = str_replace( "/skin/", PATH_CUSTOM_SKINS, $_SERVER['REQUEST_URI'] );
+        $url = (preg_match("/^(.*)\?.*$/", $_SERVER["REQUEST_URI"], $arrayMatch))? $arrayMatch[1] : $_SERVER["REQUEST_URI"];
+
+        $fileToBeStreamed = str_replace("/skin/", PATH_CUSTOM_SKINS, $url);
 
         if (file_exists( $fileToBeStreamed )) {
             //NewRelic Snippet - By JHL
@@ -927,7 +929,7 @@ if (! defined( 'EXECUTE_BY_CRON' )) {
         $noLoginFiles[] = 'cases_Derivate';
         $noLoginFiles[] = 'cases_NextStep';
         $noLoginFiles[] = 'genericAjax';
-        $noLoginFiles[] = 'casesSaveDataView'; 
+        $noLoginFiles[] = 'casesSaveDataView';
 
         $noLoginFolders[] = 'services';
         $noLoginFolders[] = 'tracker';