From 069550d546430858f1646d6a1dcb94251ba63894 Mon Sep 17 00:00:00 2001
From: Cerdic <cedric@yterium.com>
Date: Wed, 17 Apr 2024 09:44:12 +0200
Subject: [PATCH] =?UTF-8?q?fix:=20ne=20pas=20provoquer=20une=20fatale=20qu?=
=?UTF-8?q?and=20on=20essaye=20de=20securiser=20une=20action=20qui=20a=20?=
=?UTF-8?q?=C3=A9t=C3=A9=20appel=C3=A9e=20sans=20arg=20ni=20hash?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
---
ecrire/inc/securiser_action.php | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/ecrire/inc/securiser_action.php b/ecrire/inc/securiser_action.php
index c3e8aacfb0..5f34ec8e1b 100644
--- a/ecrire/inc/securiser_action.php
+++ b/ecrire/inc/securiser_action.php
@@ -54,9 +54,9 @@ function inc_securiser_action_dist($action = '', $arg = '', $redirect = '', $mod
if ($action) {
return securiser_action_auteur($action, $arg, $redirect, $mode, $att, $public);
} else {
- $arg = _request('arg');
- $hash = _request('hash');
- $action = _request('action') ?: _request('formulaire_action');
+ $arg = _request('arg') ?? '';
+ $hash = _request('hash') ?? '';
+ $action = _request('action') ?: (_request('formulaire_action') ?? '');
if ($a = verifier_action_auteur("$action-$arg", $hash)) {
return $arg;
}
--
GitLab