User module: check if recipient (user) for mail exists

IlchCMS · Nov 17, 2024 · 3b13e93 · 3b13e93
1 parent 9fff84b
commit 3b13e93
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/application/modules/user/controllers/Mail.php b/application/modules/user/controllers/Mail.php
@@ -14,8 +14,21 @@ class Mail extends \Ilch\Controller\Frontend
     public function indexAction()
     {
         $userMapper = new UserMapper();
+
+        if (!$this->getRequest()->getParam('user') || !is_numeric($this->getRequest()->getParam('user'))) {
+            $this->redirect()
+                ->withMessage('userNotFound', 'danger')
+                ->to(['controller' => 'index', 'action' => 'index']);
+        }
+
         $user = $userMapper->getUserById($this->getRequest()->getParam('user'));
 
+        if (!$user) {
+            $this->redirect()
+                ->withMessage('userNotFound', 'danger')
+                ->to(['controller' => 'index', 'action' => 'index']);
+        }
+
         $this->getLayout()->getTitle()
             ->add($this->getTranslator()->trans('menuUserList'))
             ->add($user->getName())