Unverified Commit 709d9afa authored by GoT's avatar GoT Committed by GitHub
Browse files

Merge pull request from GHSA-frf2-c9q3-qg9m

Make sure the user is connected before submit reorder
parents 69f840d7 3afc5a66
......@@ -58,7 +58,10 @@ class OrderControllerCore extends FrontController
{
parent::postProcess();
if (Tools::isSubmit('submitReorder') && $id_order = (int) Tools::getValue('id_order')) {
if (Tools::isSubmit('submitReorder')
&& $this->context->customer->isLogged()
&& $id_order = (int) Tools::getValue('id_order')
) {
$oldCart = new Cart(Order::getCartIdStatic($id_order, $this->context->customer->id));
$duplication = $oldCart->duplicate();
if (!$duplication || !Validate::isLoadedObject($duplication['cart'])) {
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment