fix(form): access to form not properly checked (#1047)

Signed-off-by: btry <tbugier@teclib.com>
pluginsGLPI · Jul 19, 2018 · 1a40790 · 1a40790
1 parent 3b2051f
commit 1a40790
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/front/formdisplay.php b/front/formdisplay.php
@@ -46,6 +46,7 @@
 if (isset($_REQUEST['id'])
    && is_numeric($_REQUEST['id'])) {
 
+   $form->check($_REQUEST['id'], READ);
    if ($form->getFromDB((int) $_REQUEST['id'])) {
 
       if ($form->fields['access_rights'] != PluginFormcreatorForm::ACCESS_PUBLIC) {