Skip to content

Commit

Permalink
fix(form): don't access deleted forms
Browse files Browse the repository at this point in the history
Signed-off-by: Thierry Bugier <tbugier@teclib.com>
  • Loading branch information
btry committed Oct 10, 2019
1 parent 0290a97 commit 6169412
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion front/formdisplay.php
Original file line number Diff line number Diff line change
Expand Up @@ -47,7 +47,7 @@
&& is_numeric($_REQUEST['id'])) {

if ($form->getFromDB((int) $_REQUEST['id'])) {
if ($form->fields['is_active'] == '0') {
if ($form->fields['is_active'] == '0' || $form->fields['is_deleted'] != '0') {
Html::displayNotFoundError();
}
if ($form->fields['access_rights'] != PluginFormcreatorForm::ACCESS_PUBLIC) {
Expand Down

0 comments on commit 6169412

Please sign in to comment.