Elgg / Elgg

mod/reportedcontent/actions/reportedcontent/add.php

<?php
/**
 * Elgg report action
 * 
 * @package ElggReportContent
 */
$title = get_input('title');
$description = get_input('description');
$address = get_input('address');
$access = ACCESS_PRIVATE; //this is private and only admins can see it

$fail = function () use ($address) {
	register_error(elgg_echo('reportedcontent:failed'));
	forward(elgg_normalize_site_url($address));

It seems like elgg_normalize_site_url($address) can also be of type false; however, parameter $location of forward() does only seem to accept string, maybe add an additional type check?

};

if (!$title || !$address) {
	$fail();
}

$report = new ElggObject;
$report->subtype = "reported_content";
$report->owner_guid = elgg_get_logged_in_user_guid();
$report->title = $title;
$report->address = $address;
$report->description = $description;
$report->access_id = $access;

if (!$report->save()) {
	$fail();
}

if (!elgg_trigger_plugin_hook('reportedcontent:add', 'system', array('report' => $report), true)) {
	$report->delete();
	$fail();
}

system_message(elgg_echo('reportedcontent:success'));
$report->state = "active";
forward($address);