server side validation

joomla · Jul 20, 2016 · 5996fb5 · 5996fb5
1 parent 81fa2c9
commit 5996fb5
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/libraries/cms/helper/tags.php b/libraries/cms/helper/tags.php
@@ -209,6 +209,12 @@ public function createTagsFromField($tags)
 
 			foreach ($tags as $key => $tag)
 			{
+				// User is not allowed to create tags, so don't create.
+				if (strpos($tag, '#new#') !== false && JFactory::getUser()->authorise('core.create', 'com_tags'))
+				{
+					continue;
+				}
+
 				// Remove the #new# prefix that identifies new tags
 				$tagText = str_replace('#new#', '', $tag);