aboutsummaryrefslogtreecommitdiffstats
path: root/phpBB/includes/ucp/ucp_groups.php
diff options
context:
space:
mode:
authorMarc Alexander <admin@m-a-styles.de>2020-01-04 14:21:58 +0100
committerMarc Alexander <admin@m-a-styles.de>2020-01-04 21:51:44 +0100
commit1b8193ab8b2c73d4a38520c206816817db168447 (patch)
tree7f0842d90b52cb926d15cc1df1dde77a2972d586 /phpBB/includes/ucp/ucp_groups.php
parentb83de54bb4fd3217b41f61de896e73732752d196 (diff)
parented9cbc89c19bc6321bfdd540f241683b71ea9a6e (diff)
downloadforums-1b8193ab8b2c73d4a38520c206816817db168447.tar
forums-1b8193ab8b2c73d4a38520c206816817db168447.tar.gz
forums-1b8193ab8b2c73d4a38520c206816817db168447.tar.bz2
forums-1b8193ab8b2c73d4a38520c206816817db168447.tar.xz
forums-1b8193ab8b2c73d4a38520c206816817db168447.zip
Merge branch '3.2.x' into 3.3.x
Diffstat (limited to 'phpBB/includes/ucp/ucp_groups.php')
-rw-r--r--phpBB/includes/ucp/ucp_groups.php17
1 files changed, 11 insertions, 6 deletions
diff --git a/phpBB/includes/ucp/ucp_groups.php b/phpBB/includes/ucp/ucp_groups.php
index d574549093..6eba3a03a9 100644
--- a/phpBB/includes/ucp/ucp_groups.php
+++ b/phpBB/includes/ucp/ucp_groups.php
@@ -534,7 +534,12 @@ class ucp_groups
'teampage' => $group_row['group_teampage'],
);
- if ($config['allow_avatar'])
+ if (!check_form_key('ucp_groups'))
+ {
+ $error[] = $user->lang['FORM_INVALID'];
+ }
+
+ if (!count($error) && $config['allow_avatar'])
{
// Handle avatar
$driver_name = $phpbb_avatar_manager->clean_driver_name($request->variable('avatar_driver', ''));
@@ -556,11 +561,6 @@ class ucp_groups
$error = array_merge($error, $phpbb_avatar_manager->localize_errors($user, $avatar_error));
}
- if (!check_form_key('ucp_groups'))
- {
- $error[] = $user->lang['FORM_INVALID'];
- }
-
// Validate submitted colour value
if ($colour_error = validate_data($submit_ary, array('colour' => array('hex_colour', true))))
{
@@ -875,6 +875,11 @@ class ucp_groups
trigger_error($user->lang['NO_GROUP'] . $return_page);
}
+ if (!check_form_key('ucp_groups'))
+ {
+ trigger_error($user->lang('FORM_INVALID') . $return_page);
+ }
+
if (!($row = group_memberships($group_id, $user->data['user_id'])))
{
trigger_error($user->lang['NOT_MEMBER_OF_GROUP'] . $return_page);