TickTackk
Well-known member
Inside action Save under controller UserField there is no checking done for Post Only. So this
could be
Code:
public function actionSave()
{
$fieldId = $this->_input->filterSingle('field_id', XenForo_Input::STRING);
Code:
public function actionSave()
{
$this->_assertPostOnly();
$fieldId = $this->_input->filterSingle('field_id', XenForo_Input::STRING);