From f3e9be3d6ca35e0721ca24bb33a43121d30247ff Mon Sep 17 00:00:00 2001 From: Seamus Lee Date: Mon, 27 May 2019 16:27:25 +1000 Subject: [PATCH] Validate queue_id is a positive integer before passing to the BAO Switch to using retrieveValue as per Eileen --- extern/open.php | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/extern/open.php b/extern/open.php index c48945c765..b5db5f7e70 100644 --- a/extern/open.php +++ b/extern/open.php @@ -2,10 +2,12 @@ require_once '../civicrm.config.php'; require_once 'CRM/Core/Config.php'; require_once 'CRM/Core/Error.php'; -require_once 'CRM/Utils/Array.php'; +require_once 'CRM/Utils/Type.php'; +require_once 'CRM/Utils/Rule.php'; +require_once 'CRM/Utils/Request.php'; $config = CRM_Core_Config::singleton(); -$queue_id = CRM_Utils_Array::value('q', $_GET); +$queue_id = CRM_Utils_Request::retrieveValue('q', 'Positive', NULL, FALSE, 'GET'); if (!$queue_id) { echo "Missing input parameters\n"; exit(); -- 2.25.1