Fixes #124 - vote deletion
This commit is contained in:
parent
0c5f623ce0
commit
cb0e74fba8
@ -245,9 +245,9 @@ if (!empty($_POST['save'])) { // Save edition of an old vote
|
|||||||
// -------------------------------
|
// -------------------------------
|
||||||
|
|
||||||
if (!empty($_GET['delete_vote'])) {
|
if (!empty($_GET['delete_vote'])) {
|
||||||
$vote_id = filter_input(INPUT_GET, 'delete_vote', FILTER_VALIDATE_INT);
|
$vote_id = filter_input(INPUT_GET, 'delete_vote', FILTER_VALIDATE_REGEXP, ['options' => ['regexp' => BASE64_REGEX]]);
|
||||||
$vote_id = Utils::base64url_decode($vote_id);
|
$vote_id = Utils::base64url_decode($vote_id);
|
||||||
if ($adminPollService->deleteVote($poll_id, $vote_id)) {
|
if ($vote_id && $adminPollService->deleteVote($poll_id, $vote_id)) {
|
||||||
$message = new Message('success', __('adminstuds', 'Vote deleted'));
|
$message = new Message('success', __('adminstuds', 'Vote deleted'));
|
||||||
} else {
|
} else {
|
||||||
$message = new Message('danger', __('Error', 'Failed to delete the vote'));
|
$message = new Message('danger', __('Error', 'Failed to delete the vote'));
|
||||||
|
@ -26,6 +26,7 @@ const CHOICE_REGEX = '/^[012]$/';
|
|||||||
const BOOLEAN_REGEX = '/^(on|off|true|false|1|0)$/i';
|
const BOOLEAN_REGEX = '/^(on|off|true|false|1|0)$/i';
|
||||||
const BOOLEAN_TRUE_REGEX = '/^(on|true|1)$/i';
|
const BOOLEAN_TRUE_REGEX = '/^(on|true|1)$/i';
|
||||||
const EDITABLE_CHOICE_REGEX = '/^[0-2]$/';
|
const EDITABLE_CHOICE_REGEX = '/^[0-2]$/';
|
||||||
|
const BASE64_REGEX = '/^[A-Za-z0-9]+$/';
|
||||||
|
|
||||||
// CSRF (300s = 5min)
|
// CSRF (300s = 5min)
|
||||||
const TOKEN_TIME = 300;
|
const TOKEN_TIME = 300;
|
||||||
|
Loading…
Reference in New Issue
Block a user