From 1689ecb4b73afe8c3dfea02b6641e5ab49c51ad3 Mon Sep 17 00:00:00 2001 From: Thierry Bugier Date: Wed, 3 Feb 2021 08:31:22 +0100 Subject: [PATCH] fix(dropdownfield): wrong IDOR token construct Signed-off-by: Thierry Bugier --- inc/field/dropdownfield.class.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/inc/field/dropdownfield.class.php b/inc/field/dropdownfield.class.php index bb7a35516..d4d33a0db 100644 --- a/inc/field/dropdownfield.class.php +++ b/inc/field/dropdownfield.class.php @@ -378,7 +378,7 @@ public function getRenderedHtml($canEdit = true): string { $dparams = $this->buildParams($rand); $dparams['display'] = false; if (version_compare(GLPI_VERSION, '9.5.3') >= 0) { - $params['_idor_token'] = Session::getNewIDORToken(User::getType()); + $params['_idor_token'] = Session::getNewIDORToken($itemtype); } $html .= $itemtype::dropdown($dparams); }