From cd1dbc1f56164735443ff628e35051c343f8fd83 Mon Sep 17 00:00:00 2001
From: David Bomba <turbo124@gmail.com>
Date: Mon, 24 Jan 2022 10:29:47 +1100
Subject: [PATCH] Fixes for clientcontact data leak

---
 app/Http/Livewire/BillingPortalPurchase.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/app/Http/Livewire/BillingPortalPurchase.php b/app/Http/Livewire/BillingPortalPurchase.php
index e6a5de79c66e..cf97db87d771 100644
--- a/app/Http/Livewire/BillingPortalPurchase.php
+++ b/app/Http/Livewire/BillingPortalPurchase.php
@@ -454,6 +454,7 @@ class BillingPortalPurchase extends Component
 
         $contact = ClientContact::query()
             ->where('email', $this->email)
+            ->where('company_id', $this->subscription->company_id)
             ->first();
 
         $mailer = new NinjaMailerObject();