Dev: Check for logged in user before saving QuickMenu sort order

LimeSurvey · May 10, 2016 · bb72b87 · bb72b87
1 parent d5d9f51
commit bb72b87
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/application/core/plugins/QuickMenu/QuickMenu.php b/application/core/plugins/QuickMenu/QuickMenu.php
@@ -544,6 +544,13 @@ public static function getOrder($userId)
 
     public function newDirectRequest()
     {
+        $user = $this->api->getCurrentUser();
+
+        if ($user === false || $user === null)
+        {
+            throw new CException("Invalid request: user is not logged in or does not exist");
+        }
+
         $event = $this->event;
         if ($event->get('target') == "QuickMenu")
         {