Changeset 5406 for trunk/admin/themes_new.php

Timestamp:

Mar 27, 2010, 6:32:45 PM (14 years ago)

Author:

patdenice

Message:

Add token to themes installation.
Only webmasters can install new plugins, themes or languages.

File:

• trunk/admin/themes_new.php (modified) (2 diffs)

trunk/admin/themes_new.php

@@ -54 +54 @@
 // +-----------------------------------------------------------------------+
 
-if (isset($_GET['revision']) and isset($_GET['extension']) and !is_adviser())
+if (isset($_GET['revision']) and isset($_GET['extension']))
 {
-  $install_status = $themes->extract_theme_files(
-    'install',
-    $_GET['revision'],
-    $_GET['extension']
-    );
-  
-  redirect($base_url.'&installstatus='.$install_status);
+  if (!is_webmaster())
+  {
+    array_push($page['errors'], l10n('Webmaster status is required.'));
+  }
+  else
+  {
+    check_pwg_token();
+
+    $install_status = $themes->extract_theme_files(
+      'install',
+      $_GET['revision'],
+      $_GET['extension']
+      );
+    
+    redirect($base_url.'&installstatus='.$install_status);
+  }
 }
 
@@ -113 +122 @@
       . '&revision=' . $theme['revision_id']
       . '&extension=' . $theme['extension_id']
+      . '&pwg_token='.get_pwg_token()
       ;