dbxe
/
fusionpbx
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

validate domain before change (#7244)

This commit is contained in:
Ahron Greenberg (agree) 2025-02-11 10:39:47 -05:00 committed by GitHub
parent a91e2ac547
commit 2ef400aefd
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 7 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
core/domains/domains.php
View File

@ -44,8 +44,6 @@
//update the domain session variables
$domain_uuid = $_GET["domain_uuid"];
$_SESSION["previous_domain_uuid"] = $_SESSION['domain_uuid'];
$_SESSION['domain_uuid'] = $domain_uuid;
//get the domain details
$sql = "select * from v_domains ";
@ -58,7 +56,14 @@
}
unset($sql, $domains);
//validate the domain change
if (empty($_SESSION['domains'][$domain_uuid])) {
die("invalid domain");
}
//update the domain session variables
$_SESSION["previous_domain_uuid"] = $_SESSION['domain_uuid'];
$_SESSION['domain_uuid'] = $domain_uuid;
$_SESSION["domain_name"] = $_SESSION['domains'][$domain_uuid]['domain_name'];
$_SESSION['domain']['template']['name'] = $_SESSION['domains'][$domain_uuid]['template_name'] ?? null;
$_SESSION["context"] = $_SESSION["domain_name"];