mirror of
https://github.com/EGroupware/egroupware.git
synced 2024-12-27 00:58:55 +01:00
security precausion, dont allow to ignore the acl via xmlrpc
This commit is contained in:
parent
365c891649
commit
199278aef0
@ -229,6 +229,8 @@ class bocalendar
|
||||
// some defaults for xmlrpc
|
||||
if (!isset($params['date_format'])) $params['date_format'] = $this->xmlrpc_date_format;
|
||||
if (!isset($params['enum_recuring'])) $params['enum_recuring'] = false;
|
||||
// security precausion
|
||||
unset($params['ignore_acl']);
|
||||
|
||||
$events =& $this->cal->search($params);
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user