fix(form): deny access if form not enabled

pluginsGLPI · Oct 10, 2019 · 5d4489d · 5d4489d
1 parent dddf830
commit 5d4489d
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/front/formdisplay.php b/front/formdisplay.php
@@ -46,6 +46,9 @@
    && is_numeric($_REQUEST['id'])) {
 
    if ($form->getFromDB((int) $_REQUEST['id'])) {
+      if ($form->fields['is_active'] == '0') {
+         Html::displayNotFoundError();
+      }
       if ($form->fields['access_rights'] != PluginFormcreatorForm::ACCESS_PUBLIC) {
          Session::checkLoginUser();
          if (!$form->checkEntity(true)) {