diff --git a/main/inc/lib/course.lib.php b/main/inc/lib/course.lib.php index 0333c43e79..278486fd89 100644 --- a/main/inc/lib/course.lib.php +++ b/main/inc/lib/course.lib.php @@ -122,7 +122,7 @@ class CourseManager { if (api_get_multiple_access_url()) { $access_url_id = api_get_current_access_url_id(); } - if ($_configuration[$access_url_id]['hosting_limit_courses'] > 0) { + if (is_array($_configuration[$access_url_id]) && isset($_configuration[$access_url_id]['hosting_limit_courses']) && $_configuration[$access_url_id]['hosting_limit_courses'] > 0) { $num = self::count_courses(); if ($num >= $_configuration[$access_url_id]['hosting_limit_courses']) { return api_set_failure('PortalCoursesLimitReached'); diff --git a/main/inc/lib/sessionmanager.lib.php b/main/inc/lib/sessionmanager.lib.php index 3afecb1092..89c51e5c80 100644 --- a/main/inc/lib/sessionmanager.lib.php +++ b/main/inc/lib/sessionmanager.lib.php @@ -62,7 +62,7 @@ class SessionManager { if (api_get_multiple_access_url()) { $access_url_id = api_get_current_access_url_id(); } - if ($_configuration[$access_url_id]['hosting_limit_sessions'] > 0) { + if (is_array($_configuration[$access_url_id]) && isset($_configuration[$access_url_id]['hosting_limit_sessions']) && $_configuration[$access_url_id]['hosting_limit_sessions'] > 0) { $num = self::count_sessions(); if ($num >= $_configuration[$access_url_id]['hosting_limit_sessions']) { return get_lang('PortalSessionsLimitReached'); diff --git a/main/inc/lib/usermanager.lib.php b/main/inc/lib/usermanager.lib.php index 48820133e1..fad1ee88ff 100644 --- a/main/inc/lib/usermanager.lib.php +++ b/main/inc/lib/usermanager.lib.php @@ -77,30 +77,30 @@ class UserManager { public static function create_user($firstName, $lastName, $status, $email, $loginName, $password, $official_code = '', $language = '', $phone = '', $picture_uri = '', $auth_source = PLATFORM_AUTH_SOURCE, $expiration_date = '0000-00-00 00:00:00', $active = 1, $hr_dept_id = 0, $extra = null, $encrypt_method = '') { global $_user, $_configuration; - $firstName = Security::remove_XSS($firstName); - $lastName = Security::remove_XSS($lastName); - $loginName = Security::remove_XSS($loginName); - $phone = Security::remove_XSS($phone); - - // database table definition - $table_user = Database::get_main_table(TABLE_MAIN_USER); $access_url_id = 1; if (api_get_multiple_access_url()) { $access_url_id = api_get_current_access_url_id(); } - if ($_configuration[$access_url_id]['hosting_limit_users'] > 0) { + if (is_array($_configuration[$access_url_id]) && isset($_configuration[$access_url_id]['hosting_limit_users']) && $_configuration[$access_url_id]['hosting_limit_users'] > 0) { $num = self::get_number_of_users(); if ($num >= $_configuration[$access_url_id]['hosting_limit_users']) { return api_set_failure('portal users limit reached'); } } - if ($status === 1 && $_configuration[$access_url_id]['hosting_limit_teachers'] > 0) { + if ($status === 1 && is_array($_configuration[$access_url_id]) && isset($_configuration[$access_url_id]['hosting_limit_teachers']) && $_configuration[$access_url_id]['hosting_limit_teachers'] > 0) { $num = self::get_number_of_users(1); if ($num >= $_configuration[$access_url_id]['hosting_limit_teachers']) { return api_set_failure('portal teachers limit reached'); } } + $firstName = Security::remove_XSS($firstName); + $lastName = Security::remove_XSS($lastName); + $loginName = Security::remove_XSS($loginName); + $phone = Security::remove_XSS($phone); + + // database table definition + $table_user = Database::get_main_table(TABLE_MAIN_USER); //Checking the user language $languages = api_get_languages();