Changeset 4506

Timestamp:

Dec 17, 2009, 2:02:44 AM (14 years ago)

Author:

plg

Message:

bug 1328: implements check_pwg_token at plugin management level.

Location:

branches/2.0/admin

Files:

• plugins_list.php (modified) (2 diffs)
• plugins_new.php (modified) (2 diffs)
• plugins_update.php (modified) (3 diffs)

branches/2.0/admin/plugins_list.php

@@ -39 +39 @@
 if (isset($_GET['action']) and isset($_GET['plugin']) and !is_adviser())
 {
+  check_pwg_token();
+  
   $page['errors'] = $plugins->perform_action($_GET['action'], $_GET['plugin']);
 
@@ -97 +99 @@
           'VERSION' => $fs_plugin['version'],
           'DESCRIPTION' => $desc,
-          'U_ACTION' => $base_url.'&plugin='.$plugin_id);
+          'U_ACTION' => $base_url.'&plugin='.$plugin_id.'&pwg_token='.get_pwg_token());
 
   if (isset($plugins->db_plugins_by_id[$plugin_id]))

branches/2.0/admin/plugins_new.php

@@ -39 +39 @@
 if (isset($_GET['revision']) and isset($_GET['extension']) and !is_adviser())
 {
+  check_pwg_token();
+  
   $install_status = $plugins->extract_plugin_files('install', $_GET['revision'], $_GET['extension']);
 
@@ -111 +113 @@
     $url_auto_install = htmlentities($base_url)
       . '&revision=' . $plugin['revision_id']
-      . '&extension=' . $plugin['extension_id'];
+      . '&extension=' . $plugin['extension_id']
+      . '&pwg_token='.get_pwg_token()
+    ;
 
     $template->append('plugins', array(

branches/2.0/admin/plugins_update.php

@@ -38 +38 @@
 if (isset($_GET['plugin']) and isset($_GET['revision']) and !is_adviser())
 {
+  check_pwg_token();
+  
   $plugin_id = $_GET['plugin'];
   $revision = $_GET['revision'];
@@ -49 +51 @@
       . '&revision=' . $revision
       . '&plugin=' . $plugin_id
+      . '&pwg_token='.get_pwg_token()
       . '&reactivate=true');
   }
@@ -134 +137 @@
         $url_auto_update = $base_url
           . '&revision=' . $plugin_info['revision_id']
-          . '&plugin=' . $plugin_id;
+          . '&plugin=' . $plugin_id
+          . '&pwg_token='.get_pwg_token()
+          ;
 
         $template->append('plugins_not_uptodate', array(