Avoid people to alter other projects by changing form data

2017-09-23 18:48:45 -07:00
parent 8ecaa60340
commit 074f6c104f
26 changed files with 154 additions and 111 deletions
--- a/app/Controller/TaskCreationController.php
+++ b/app/Controller/TaskCreationController.php
@@ -49,6 +49,7 @@ class TaskCreationController extends BaseController
    {
        $project = $this->getProject();
        $values = $this->request->getValues();
+        $values['project_id'] = $project['id'];

        list($valid, $errors) = $this->taskValidator->validateCreation($values);