diff --git a/main/inc/email_editor.php b/main/inc/email_editor.php index 3b75805298..35340c9467 100755 --- a/main/inc/email_editor.php +++ b/main/inc/email_editor.php @@ -51,9 +51,10 @@ switch ($action) { $emailText = $objTemplate->fetch($mailTemplate); break; default: - $emailDest = Security::remove_XSS($_REQUEST['dest']); - $emailTitle = Security::remove_XSS($_REQUEST['email_title']); - $emailText = Security::remove_XSS($_REQUEST['email_text']); + $emailDest = isset($_REQUEST['dest']) ? Security::remove_XSS($_REQUEST['dest']) : ''; + $emailTitle = isset($_REQUEST['email_title']) ? Security::remove_XSS($_REQUEST['email_title']) : ''; + $emailText = isset($_REQUEST['email_text']) ? Security::remove_XSS($_REQUEST['email_text']) : ''; + break; } $defaults = [ @@ -68,9 +69,7 @@ $form->setDefaults($defaults); if ($form->validate()) { $text = Security::remove_XSS($_POST['email_text'])."\n\n---\n".get_lang('EmailSentFromLMS').' '.api_get_path(WEB_PATH); $email_administrator = Security::remove_XSS($_POST['dest']); - $user_id = api_get_user_id(); $title = Security::remove_XSS($_POST['email_title']); - $content = Security::remove_XSS($_POST['email_text']); if (!empty($_user['mail'])) { api_mail_html( '', @@ -79,7 +78,8 @@ if ($form->validate()) { $text, api_get_person_name($_user['firstname'], $_user['lastname']), '', - ['reply_to' => [ + [ + 'reply_to' => [ 'mail' => $_user['mail'], 'name' => api_get_person_name($_user['firstname'], $_user['lastname']), ],