Skip to content

Commit 1a40790

Browse files
authored
fix(form): access to form not properly checked (#1047)
Signed-off-by: btry <tbugier@teclib.com>
1 parent 3b2051f commit 1a40790

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

front/formdisplay.php

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -46,6 +46,7 @@
4646
if (isset($_REQUEST['id'])
4747
&& is_numeric($_REQUEST['id'])) {
4848

49+
$form->check($_REQUEST['id'], READ);
4950
if ($form->getFromDB((int) $_REQUEST['id'])) {
5051

5152
if ($form->fields['access_rights'] != PluginFormcreatorForm::ACCESS_PUBLIC) {

0 commit comments

Comments
 (0)