From dcf503a306721d4183552678893cfc900543cd77 Mon Sep 17 00:00:00 2001
From: joebordes <joe@tsolucio.com>
Date: Sun, 31 Oct 2021 21:48:06 +0100
Subject: [PATCH] sec(Workflow) validate CSRF on workflow actions

---
 modules/com_vtiger_workflow/activatedeactivateTask.php | 1 +
 modules/com_vtiger_workflow/savetask.php               | 1 +
 modules/com_vtiger_workflow/savetemplate.php           | 1 +
 modules/com_vtiger_workflow/saveworkflow.php           | 2 +-
 4 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/modules/com_vtiger_workflow/activatedeactivateTask.php b/modules/com_vtiger_workflow/activatedeactivateTask.php
index 7b67f376de..7498eb4a73 100644
--- a/modules/com_vtiger_workflow/activatedeactivateTask.php
+++ b/modules/com_vtiger_workflow/activatedeactivateTask.php
@@ -31,5 +31,6 @@ function activatedeactivateTask($adb, $request) {
 	</script>
 	<?php
 }
+Vtiger_Request::validateRequest();
 activatedeactivateTask($adb, $_REQUEST);
 ?>
\ No newline at end of file
diff --git a/modules/com_vtiger_workflow/savetask.php b/modules/com_vtiger_workflow/savetask.php
index c0214ff5c4..51e6850a87 100644
--- a/modules/com_vtiger_workflow/savetask.php
+++ b/modules/com_vtiger_workflow/savetask.php
@@ -102,5 +102,6 @@ function vtSaveTask($adb, $request) {
 	</script>
 	<?php
 }
+Vtiger_Request::validateRequest();
 vtSaveTask($adb, $_REQUEST);
 ?>
\ No newline at end of file
diff --git a/modules/com_vtiger_workflow/savetemplate.php b/modules/com_vtiger_workflow/savetemplate.php
index 6669553222..26880b599e 100644
--- a/modules/com_vtiger_workflow/savetemplate.php
+++ b/modules/com_vtiger_workflow/savetemplate.php
@@ -42,5 +42,6 @@ function vtSaveWorkflowTemplate($adb, $request) {
 		<a href="<?php echo $returnUrl?>">Return</a>
 	<?php
 }
+Vtiger_Request::validateRequest();
 vtSaveWorkflowTemplate($adb, $_REQUEST);
 ?>
\ No newline at end of file
diff --git a/modules/com_vtiger_workflow/saveworkflow.php b/modules/com_vtiger_workflow/saveworkflow.php
index be45f00c75..ad44c018d9 100644
--- a/modules/com_vtiger_workflow/saveworkflow.php
+++ b/modules/com_vtiger_workflow/saveworkflow.php
@@ -222,6 +222,6 @@ function vtWorkflowSave($adb, $request) {
 	<a href="<?php echo urldecode($returnUrl)?>">Return</a>
 	<?php
 }
-
+Vtiger_Request::validateRequest();
 vtWorkflowSave($adb, $_REQUEST);
 ?>
\ No newline at end of file