diff options
| author | Greg Roach <fisharebest@gmail.com> | 2021-03-26 14:06:13 +0000 |
|---|---|---|
| committer | Greg Roach <fisharebest@gmail.com> | 2021-03-26 14:06:13 +0000 |
| commit | f71fd1b08a6fa0d9d229cd88a1030d8a4f4a7fff (patch) | |
| tree | 757887d2dfc7d04c7cf4f9d6bf066a1d86e6fc54 /app/Http/RequestHandlers/MediaFileDownload.php | |
| parent | 8964ba4d0a7368b96d76c09a360d469aa1c9899c (diff) | |
| download | webtrees-f71fd1b08a6fa0d9d229cd88a1030d8a4f4a7fff.tar.gz webtrees-f71fd1b08a6fa0d9d229cd88a1030d8a4f4a7fff.tar.bz2 webtrees-f71fd1b08a6fa0d9d229cd88a1030d8a4f4a7fff.zip | |
Fix: missing mandatory query parameter should give 404
Diffstat (limited to 'app/Http/RequestHandlers/MediaFileDownload.php')
| -rw-r--r-- | app/Http/RequestHandlers/MediaFileDownload.php | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/app/Http/RequestHandlers/MediaFileDownload.php b/app/Http/RequestHandlers/MediaFileDownload.php index 6ecbdda576..33965ffc90 100644 --- a/app/Http/RequestHandlers/MediaFileDownload.php +++ b/app/Http/RequestHandlers/MediaFileDownload.php @@ -57,8 +57,8 @@ class MediaFileDownload implements RequestHandlerInterface assert($disposition === 'inline' || $disposition === 'attachment'); $params = $request->getQueryParams(); - $xref = $params['xref']; - $fact_id = $params['fact_id']; + $xref = $params['xref'] ?? ''; + $fact_id = $params['fact_id'] ?? ''; $media = Registry::mediaFactory()->make($xref, $tree); $media = Auth::checkMediaAccess($media); |