Changeset 4505


Ignore:
Timestamp:
12/16/09 22:48:09 (10 years ago)
Author:
plg
Message:

bug 1328: check_pwg_token implemented on admin/cat_list forms (+delete action)

Location:
branches/2.0/admin
Files:
2 edited

Legend:

Unmodified
Added
Removed
  • branches/2.0/admin/cat_list.php

    r4495 r4505  
    3434check_status(ACCESS_ADMINISTRATOR); 
    3535 
     36if (!empty($_POST) or isset($_GET['delete'])) 
     37{ 
     38  check_pwg_token(); 
     39} 
     40 
    3641// +-----------------------------------------------------------------------+ 
    3742// |                               functions                               | 
     
    164169  'CATEGORIES_NAV'=>$navigation, 
    165170  'F_ACTION'=>$form_action, 
     171  'PWG_TOKEN' => get_pwg_token(), 
    166172 )); 
    167173 
     
    239245  { 
    240246    $tpl_cat['U_DELETE'] = $self_url.'&delete='.$category['id']; 
     247    $tpl_cat['U_DELETE'].= '&pwg_token='.get_pwg_token(); 
    241248  } 
    242249 
  • branches/2.0/admin/template/goto/cat_list.tpl

    r2947 r4505  
    2828 
    2929<form id="addVirtual" action="{$F_ACTION}" method="post"> 
     30  <input type="hidden" name="pwg_token" value="{$PWG_TOKEN}" /> 
    3031  <p> 
    3132    {'cat_add'|@translate} : <input type="text" name="virtual_name" /> 
     
    4041{if count($categories) } 
    4142<form id="categoryOrdering" action="{$F_ACTION}" method="post"> 
     43  <input type="hidden" name="pwg_token" value="{$PWG_TOKEN}" /> 
    4244  <p> 
    4345    <input class="submit" name="submitOrder" type="submit" value="{'Save order'|@translate}" {$TAG_INPUT_ENABLED} /> 
Note: See TracChangeset for help on using the changeset viewer.