diff --git a/htdocs/core/lib/files.lib.php b/htdocs/core/lib/files.lib.php index 96c74f8d3ca..9609b3e116a 100644 --- a/htdocs/core/lib/files.lib.php +++ b/htdocs/core/lib/files.lib.php @@ -7,6 +7,7 @@ * Copyright (C) 2019-2025 Frédéric France * Copyright (C) 2023 Lenin Rivas * Copyright (C) 2024-2025 MDW + * Copyright (C) 2025 William Mead * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by @@ -3334,7 +3335,7 @@ function dol_check_secure_access_document($modulepart, $original_file, $entity, } $original_file = $conf->societe->multidir_output[$entity].'/'.$original_file; $sqlprotectagainstexternals = "SELECT rowid as fk_soc FROM ".MAIN_DB_PREFIX."societe WHERE rowid='".$db->escape($refname)."' AND entity IN (".getEntity('societe').")"; - } elseif ($modulepart == 'contact' && !empty($conf->societe->multidir_output[$entity])) { + } elseif (($modulepart == 'contact' || $modulepart == 'socpeople') && !empty($conf->societe->multidir_output[$entity])) { // Wrapping for contact if (empty($entity) || empty($conf->societe->multidir_output[$entity])) { return array('accessallowed' => 0, 'error' => 'Value entity must be provided');