PM-2376: I completed the solution in BPMN with link and field

2015-04-28 16:21:45 -04:00
parent 7def8c7655
commit f0678e4765
6 changed files with 402 additions and 6 deletions
--- a/workflow/engine/methods/services/ActionsByEmail.php
+++ b/workflow/engine/methods/services/ActionsByEmail.php
@@ -6,7 +6,7 @@ if (PMLicensedFeatures
    // since all the request parameters using this script are encrypted 
    // using the URL_KEY the probability of injecting any kind of code using
    // this entry point are only possible knowing the aforementioned key.
-    switch (true) {
+    switch (G::decrypt(urldecode(utf8_encode($_REQUEST['ACTION'])), URL_KEY)) {
        case 'processABE' :
            $G_PUBLISH = new Publisher();
            try {