From 2c31e1aefc284688bc8ceb0b2b949e7e661e67c4 Mon Sep 17 00:00:00 2001
From: Fred Tempez <frederic.tempez@outlook.com>
Date: Fri, 6 Sep 2024 18:34:46 +0200
Subject: [PATCH] =?UTF-8?q?13.3.06=20=20bug=20de=20s=C3=A9curit=C3=A9=20pr?=
 =?UTF-8?q?ofil=20rfm?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 core/module/user/view/profilEdit/profilEdit.php | 2 +-
 core/vendor/filemanager/config/config.php       | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/core/module/user/view/profilEdit/profilEdit.php b/core/module/user/view/profilEdit/profilEdit.php
index 265f708c..cfd01db7 100644
--- a/core/module/user/view/profilEdit/profilEdit.php
+++ b/core/module/user/view/profilEdit/profilEdit.php
@@ -152,7 +152,7 @@
                     <?php echo template::select('profilEditPath', $module::$sharePath, [
                         'label' => 'Dossier',
                         'class' => 'filemanager',
-                        'selected' => '.' . $this->getData(['profil', $this->getUrl(2), $this->getUrl(3), 'folder', 'path'])
+                        'selected' => $this->getData(['profil', $this->getUrl(2), $this->getUrl(3), 'folder', 'path'])
                     ]); ?>
                 </div>
             </div>
diff --git a/core/vendor/filemanager/config/config.php b/core/vendor/filemanager/config/config.php
index 4caad592..d91cf554 100644
--- a/core/vendor/filemanager/config/config.php
+++ b/core/vendor/filemanager/config/config.php
@@ -54,7 +54,7 @@ if (!is_null($u) && !is_null($g) && !is_null($userId)) {
 			if ($g['profil'][$group][$profil]['filemanager'] === false)
 				exit('Accès interdit');
 			// lecture du profil
-			if (!is_null($profil)) {
+			if (!is_null($profil) and $g['profil'][$group][$profil]['folder']['path']  !== '') {
 				$file = $g['profil'][$group][$profil]['file'];
 				$folder = $g['profil'][$group][$profil]['folder'];
 				$uploadDir = $g['profil'][$group][$profil]['folder']['path'];