fix bookmark saving; fix #836

glpi-project · Jul 27, 2016 · 445ae11 · 445ae11
1 parent 6a47e36
commit 445ae11
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/front/bookmark.php b/front/bookmark.php
@@ -51,7 +51,9 @@
 if (!isset($_GET["itemtype"])) {
    $_GET["itemtype"] = -1;
 } else {
-   $_GET['itemtype'] = (int)$_GET['itemtype'];
+   if (!is_subclass_of($_GET['itemtype'], 'CommonDBTM')) {
+       throw new \RuntimeException('Invalid name provided!');
+   }
 }
 
 if (!isset($_GET["url"])) {