security update core+modules
This commit is contained in:
@@ -395,7 +395,7 @@ function menu_edit_item_validate($form, &$form_state) {
|
||||
else {
|
||||
unset($item['options']['fragment']);
|
||||
}
|
||||
if ($item['link_path'] != $parsed_link['path']) {
|
||||
if (isset($parsed_link['path']) && $item['link_path'] != $parsed_link['path']) {
|
||||
$item['link_path'] = $parsed_link['path'];
|
||||
}
|
||||
}
|
||||
@@ -512,8 +512,7 @@ function menu_delete_menu_page($menu) {
|
||||
// System-defined menus may not be deleted.
|
||||
$system_menus = menu_list_system_menus();
|
||||
if (isset($system_menus[$menu['menu_name']])) {
|
||||
drupal_access_denied();
|
||||
return;
|
||||
return MENU_ACCESS_DENIED;
|
||||
}
|
||||
return drupal_get_form('menu_delete_menu_confirm', $menu);
|
||||
}
|
||||
@@ -622,8 +621,7 @@ function menu_item_delete_page($item) {
|
||||
// Links defined via hook_menu may not be deleted. Updated items are an
|
||||
// exception, as they can be broken.
|
||||
if ($item['module'] == 'system' && !$item['updated']) {
|
||||
drupal_access_denied();
|
||||
return;
|
||||
return MENU_ACCESS_DENIED;
|
||||
}
|
||||
return drupal_get_form('menu_item_delete_form', $item);
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user