Fixed: admin is able to see the hotel address in the admin address controller by changing the id in in url

2024-09-26 18:59:40 +05:30
parent 589dd8305f
commit dd7f597539
1 changed files with 3 additions and 0 deletions
--- a/controllers/admin/AdminAddressesController.php
+++ b/controllers/admin/AdminAddressesController.php
@@ -140,6 +140,9 @@ class AdminAddressesControllerCore extends AdminController
                    'name' => 'email'
                ),
            );
+        } else if (isset($this->object->id) && $this->object->id_hotel) {
+            $this->errors[] = Tools::displayError('The object cannot be loaded (or found)');
+            return false;
        }

        $this->fields_form = array(