Fixed issue: Trailing space in token key leads to unrecoverable surve…

…y situation
LimeSurvey · Dec 16, 2014 · 5501572 · 5501572
1 parent d94715b
commit 5501572
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/application/controllers/survey/index.php b/application/controllers/survey/index.php
@@ -69,7 +69,7 @@ function action()
         $thisstep = $param['thisstep'];
         $move=getMove();
         Yii::app()->setConfig('move',$move);
-        $clienttoken = $param['token'];
+        $clienttoken = trim($param['token']);
         $standardtemplaterootdir = Yii::app()->getConfig('standardtemplaterootdir');
         if (is_null($thissurvey) && !is_null($surveyid)) $thissurvey = getSurveyInfo($surveyid);
 
@@ -314,7 +314,7 @@ function action()
             }
 
             if ($errormsg == "") {
-                LimeExpressionManager::SetDirtyFlag();  
+                LimeExpressionManager::SetDirtyFlag();
                 buildsurveysession($surveyid);
                 if (loadanswers()){
                     Yii::app()->setConfig('move','movenext');
@@ -391,7 +391,7 @@ function action()
                     {
                         $sError = $clang->gT("This invitation is not valid anymore.");
                     }
-                    else // This can not happen 
+                    else // This can not happen
                     {
                         $sError = $clang->gT("This is a controlled survey. You need a valid token to participate.");
                     }
@@ -599,7 +599,7 @@ function _getParameters($args = array(), $post = array())
         foreach(array('lang','action','newtest','qid','gid','sid','loadname','loadpass','scid','thisstep','move','token') as $sNeededParam)
         {
             $param[$sNeededParam]=returnGlobal($sNeededParam,true);
-        } 
+        }
 
         return $param;
     }