#Fixes::156594583::Chaitanya N::Burp Suite POST request is allowing to create...

#Fixes::156594583::Chaitanya N::Burp Suite POST request is allowing to create webform without name and for unsupported module issue is fixed

pkg/vtiger/modules/Webforms/settings/actions/Save.php

@@ -35,11 +35,19 @@ class Settings_Webforms_Save_Action extends Settings_Vtiger_Index_Action {
 		}
 
 		$fieldsList = $recordModel->getModule()->getFields();
+		$supportedModules = Settings_Webforms_Module_Model::getSupportedModulesList();
 		foreach ($fieldsList as $fieldName => $fieldModel) {
 			$fieldValue = $request->get($fieldName);
 			if (!$fieldValue) {
 				$fieldValue = $fieldModel->get('defaultvalue');
 			}
+			
+			if($fieldModel->isMandatory() && empty(trim($fieldValue))) {
+                throw new AppException(vtranslate('LBL_MANDATORY_FIELD_MISSING'));
+			}else if($fieldName == 'targetmodule' && !array_key_exists($fieldValue,$supportedModules)){
+				throw new Exception('Target module is not supported to create webform');
+			}
+			
 			$recordModel->set($fieldName, $fieldValue);
 		}
 
@@ -61,4 +69,4 @@ class Settings_Webforms_Save_Action extends Settings_Vtiger_Index_Action {
 	public function validateRequest(Vtiger_Request $request) {
 		$request->validateWriteAccess();
 	}
-}
\ No newline at end of file
+}