diff --git a/main/help/faq.php b/main/help/faq.php
index fabc7b1fab..d208b42858 100644
--- a/main/help/faq.php
+++ b/main/help/faq.php
@@ -14,39 +14,38 @@
$language_file = 'help';
require_once '../inc/global.inc.php';
-
-$help_name = Security::remove_XSS($_GET['open']);
+$help_name = isset($_GET['open']) ? Security::remove_XSS($_GET['open']) : null;
Display :: display_header(get_lang('Faq'));
if (api_is_platform_admin()) {
- echo ' ';
+ echo '
';
}
echo Display::page_header(get_lang('Faq'));
$faq_file = 'faq.html';
if (!empty($_GET['edit']) && $_GET['edit'] == 'true' && api_is_platform_admin()) {
- $form = new FormValidator('set_faq', 'post', 'faq.php?edit=true');
- $form -> add_html_editor('faq_content', null, false, false, array('ToolbarSet' => 'FAQ', 'Width' => '100%', 'Height' => '300'));
- $form -> addElement('style_submit_button', 'faq_submit', get_lang('Ok'));
- $faq_content = @(string)file_get_contents(api_get_path(SYS_PATH).'home/faq.html');
- $faq_content = api_to_system_encoding($faq_content, api_detect_encoding(strip_tags($faq_content)));
- $form -> setDefaults(array('faq_content' => $faq_content));
- if ($form -> validate()) {
- $content = $form -> getSubmitValue('faq_content');
- $fpath = api_get_path(SYS_PATH).'home/'.$faq_file;
- if (is_file($fpath) && is_writeable($fpath)) {
- $fp = fopen(api_get_path(SYS_PATH).'home/'.$faq_file, 'w');
- fwrite($fp, $content);
- fclose($fp);
- } else {
- Display::display_warning_message(get_lang('WarningFaqFileNonWriteable'));
- }
- echo $content;
- } else {
- $form -> display();
- }
+ $form = new FormValidator('set_faq', 'post', 'faq.php?edit=true');
+ $form->add_html_editor('faq_content', null, false, false, array('ToolbarSet' => 'FAQ', 'Width' => '100%', 'Height' => '300'));
+ $form->addElement('style_submit_button', 'faq_submit', get_lang('Ok'));
+ $faq_content = @(string)file_get_contents(api_get_path(SYS_PATH).'home/faq.html');
+ $faq_content = api_to_system_encoding($faq_content, api_detect_encoding(strip_tags($faq_content)));
+ $form->setDefaults(array('faq_content' => $faq_content));
+ if ($form->validate()) {
+ $content = $form->getSubmitValue('faq_content');
+ $fpath = api_get_path(SYS_PATH).'home/'.$faq_file;
+ if (is_file($fpath) && is_writeable($fpath)) {
+ $fp = fopen(api_get_path(SYS_PATH).'home/'.$faq_file, 'w');
+ fwrite($fp, $content);
+ fclose($fp);
+ } else {
+ Display::display_warning_message(get_lang('WarningFaqFileNonWriteable'));
+ }
+ echo $content;
+ } else {
+ $form->display();
+ }
} else {
$faq_content = @(string)file_get_contents(api_get_path(SYS_PATH).'home/'.$faq_file);
$faq_content = api_to_system_encoding($faq_content, api_detect_encoding(strip_tags($faq_content)));
diff --git a/main/help/help.php b/main/help/help.php
index 27aa7a331d..20e2633021 100644
--- a/main/help/help.php
+++ b/main/help/help.php
@@ -13,15 +13,20 @@
// Language file that needs to be included
$language_file = 'help';
require_once '../inc/global.inc.php';
-$help_name = Security::remove_XSS($_GET['open']);
+$help_name = isset($_GET['open']) ? Security::remove_XSS($_GET['open']) : null;
+if (empty($help_name)) {
+ api_not_allowed(true);
+}
?>
-
-
+
+
+