Remove warning + notice messages in agenda (path disclosure) - refs #2746

Author: ywarnier

main/calendar/agenda.php

@@ -81,7 +81,12 @@ function add_image_form() {
 Event::event_access_tool(TOOL_CALENDAR_EVENT);
 
 if ($type === 'fromjs') {
-    $id_list = explode('_', $eventId);
+    // split the "id" parameter only if string and there are _ separators
+    if (preg_match('/_/', $eventId)) {
+        $id_list = explode('_', $eventId);
+    } else {
+        $id_list = $eventId;
+    }
     $eventId = $id_list[1];
     $event_type = $id_list[0];
     $event_type = $event_type === 'platform' ? 'admin' : $event_type;
@@ -306,6 +311,8 @@ function add_image_form() {
         "url" => $url,
         "name" => get_lang('Agenda'),
     ];
+} else {
+    $actionName = '';
 }
 
 // Tool introduction