From eef1b04540c29ee3c06ec36fd0701c22f7712c5f Mon Sep 17 00:00:00 2001
From: Ere Maijala <ere.maijala@helsinki.fi>
Date: Mon, 5 Nov 2018 16:58:28 +0200
Subject: [PATCH] Bail out from selectCardAction if no card ID is given.
 (#1263)

---
 module/VuFind/src/VuFind/Controller/LibraryCardsController.php | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/module/VuFind/src/VuFind/Controller/LibraryCardsController.php b/module/VuFind/src/VuFind/Controller/LibraryCardsController.php
index f99eb510cff..909c51aa604 100644
--- a/module/VuFind/src/VuFind/Controller/LibraryCardsController.php
+++ b/module/VuFind/src/VuFind/Controller/LibraryCardsController.php
@@ -191,6 +191,9 @@ class LibraryCardsController extends AbstractBase
         }
 
         $cardID = $this->params()->fromQuery('cardID');
+        if (null === $cardID) {
+            return $this->redirect()->toRoute('myresearch-home');
+        }
         $user->activateLibraryCard($cardID);
 
         // Connect to the ILS and check that the credentials are correct:
-- 
GitLab