From d0f56b6db016519f6dbf423af8ff0db28329fb15 Mon Sep 17 00:00:00 2001 From: Jared Hancock <jared@osticket.com> Date: Tue, 26 Nov 2013 13:50:10 -0600 Subject: [PATCH] Don't valid private fields on client submission --- open.php | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/open.php b/open.php index 927a45349..706c9ccd4 100644 --- a/open.php +++ b/open.php @@ -34,7 +34,8 @@ if($_POST): if ($topic = Topic::lookup($vars['topicId'])) { if ($form = DynamicForm::lookup($topic->ht['form_id'])) { $form = $form->instanciate(); - if (!$form->isValid()) + // Don't require internal fields (they're not shown) + if (!$form->isValid(function($f) { return !$f->get('private'); })) $errors += $form->errors(); } } -- GitLab