Fixed issue: XSS filter for attributes is applied when the participan…

…t is marked as completed or quota out
LimeSurvey · Oct 5, 2016 · 160b48a · 160b48a
1 parent 3bad8ca
commit 160b48a
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/application/helpers/frontend_helper.php b/application/helpers/frontend_helper.php
@@ -477,7 +477,7 @@ function submittokens($quotaexit=false)
     $today = dateShift(date("Y-m-d H:i:s"), "Y-m-d H:i", Yii::app()->getConfig("timeadjust"));
 
     // check how many uses the token has left
-    $token = Token::model($surveyid)->findByAttributes(array('token' => $clienttoken));
+    $token = Token::model($surveyid,'FinalSubmit')->findByAttributes(array('token' => $clienttoken));
 
     if ($quotaexit==true)
     {

diff --git a/application/models/Token.php b/application/models/Token.php
@@ -286,7 +286,7 @@ public function rules()
             );
             foreach (decodeTokenAttributes($this->survey->attributedescriptions) as $key => $info)
             {
-                 $aRules[]=array($key,'LSYii_Validators');
+                 $aRules[]=array($key,'LSYii_Validators','except'=>'FinalSubmit');
             }
             return $aRules;
         }