|
@@ -51,9 +51,10 @@ switch ($action) {
|
|
|
$emailText = $objTemplate->fetch($mailTemplate);
|
|
|
break;
|
|
|
default:
|
|
|
- $emailDest = Security::remove_XSS($_REQUEST['dest']);
|
|
|
- $emailTitle = Security::remove_XSS($_REQUEST['email_title']);
|
|
|
- $emailText = Security::remove_XSS($_REQUEST['email_text']);
|
|
|
+ $emailDest = isset($_REQUEST['dest']) ? Security::remove_XSS($_REQUEST['dest']) : '';
|
|
|
+ $emailTitle = isset($_REQUEST['email_title']) ? Security::remove_XSS($_REQUEST['email_title']) : '';
|
|
|
+ $emailText = isset($_REQUEST['email_text']) ? Security::remove_XSS($_REQUEST['email_text']) : '';
|
|
|
+ break;
|
|
|
}
|
|
|
|
|
|
$defaults = [
|
|
@@ -68,9 +69,7 @@ $form->setDefaults($defaults);
|
|
|
if ($form->validate()) {
|
|
|
$text = Security::remove_XSS($_POST['email_text'])."\n\n---\n".get_lang('EmailSentFromLMS').' '.api_get_path(WEB_PATH);
|
|
|
$email_administrator = Security::remove_XSS($_POST['dest']);
|
|
|
- $user_id = api_get_user_id();
|
|
|
$title = Security::remove_XSS($_POST['email_title']);
|
|
|
- $content = Security::remove_XSS($_POST['email_text']);
|
|
|
if (!empty($_user['mail'])) {
|
|
|
api_mail_html(
|
|
|
'',
|
|
@@ -79,7 +78,8 @@ if ($form->validate()) {
|
|
|
$text,
|
|
|
api_get_person_name($_user['firstname'], $_user['lastname']),
|
|
|
'',
|
|
|
- ['reply_to' => [
|
|
|
+ [
|
|
|
+ 'reply_to' => [
|
|
|
'mail' => $_user['mail'],
|
|
|
'name' => api_get_person_name($_user['firstname'], $_user['lastname']),
|
|
|
],
|