Get request from get_user_popup in user_manager.ajax.php only by ajax #…

…3493
chamilo · Sep 4, 2020 · 965709a · 965709a
1 parent aff65c3
commit 965709a
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/main/inc/ajax/user_manager.ajax.php b/main/inc/ajax/user_manager.ajax.php
@@ -12,6 +12,7 @@
 require_once __DIR__.'/../global.inc.php';
 
 $request = Request::createFromGlobals();
+$isRequestByAjax = $request->isXmlHttpRequest();
 
 $action = $_GET['a'];
 
@@ -36,6 +37,10 @@
         }
         break;
     case 'get_user_popup':
+        if (!$isRequestByAjax) {
+            break;
+        }
+
         $courseId = (int) $request->get('course_id');
         $sessionId = (int) $request->get('session_id');
         $userId = (int) $request->get('user_id');