diff --git a/app/conferences_active/conference_interactive_inc.php b/app/conferences_active/conference_interactive_inc.php index 4b9315da13..594d354b17 100644 --- a/app/conferences_active/conference_interactive_inc.php +++ b/app/conferences_active/conference_interactive_inc.php @@ -43,15 +43,19 @@ $text = $language->get(); //get the http get or post and set it as php variables - if (is_numeric($_REQUEST["c"])) { + if (!empty($_REQUEST["c"]) && is_numeric($_REQUEST["c"])) { $conference_id = $_REQUEST["c"]; } - elseif (is_uuid($_REQUEST["c"])) { + elseif (!empty($_REQUEST["c"]) && is_uuid($_REQUEST["c"])) { $conference_id = $_REQUEST["c"]; } + else { + //exit if the conference id is invalid + exit; + } //replace the space with underscore - $conference_name = !empty($conference_id).'@'.$_SESSION['domain_name']; + $conference_name = $conference_id.'@'.$_SESSION['domain_name']; //create the conference list command $switch_cmd = "conference '".$conference_name."' xml_list";