Julio Montoya 5 жил өмнө
parent
commit
2dd5d09cfd

+ 6 - 6
main/inc/email_editor.php

@@ -51,9 +51,10 @@ switch ($action) {
         $emailText = $objTemplate->fetch($mailTemplate);
         break;
     default:
-        $emailDest = Security::remove_XSS($_REQUEST['dest']);
-        $emailTitle = Security::remove_XSS($_REQUEST['email_title']);
-        $emailText = Security::remove_XSS($_REQUEST['email_text']);
+        $emailDest = isset($_REQUEST['dest']) ? Security::remove_XSS($_REQUEST['dest']) : '';
+        $emailTitle = isset($_REQUEST['email_title']) ? Security::remove_XSS($_REQUEST['email_title']) : '';
+        $emailText = isset($_REQUEST['email_text']) ? Security::remove_XSS($_REQUEST['email_text']) : '';
+        break;
 }
 
 $defaults = [
@@ -68,9 +69,7 @@ $form->setDefaults($defaults);
 if ($form->validate()) {
     $text = Security::remove_XSS($_POST['email_text'])."\n\n---\n".get_lang('EmailSentFromLMS').' '.api_get_path(WEB_PATH);
     $email_administrator = Security::remove_XSS($_POST['dest']);
-    $user_id = api_get_user_id();
     $title = Security::remove_XSS($_POST['email_title']);
-    $content = Security::remove_XSS($_POST['email_text']);
     if (!empty($_user['mail'])) {
         api_mail_html(
             '',
@@ -79,7 +78,8 @@ if ($form->validate()) {
             $text,
             api_get_person_name($_user['firstname'], $_user['lastname']),
             '',
-            ['reply_to' => [
+            [
+                'reply_to' => [
                     'mail' => $_user['mail'],
                     'name' => api_get_person_name($_user['firstname'], $_user['lastname']),
                 ],