Changeset 6897 for trunk

Timestamp:

Sep 13, 2010, 9:40:42 PM (14 years ago)

Author:

nikrou

Message:

Fix bug 1856 : CSRF issue that allow to change admin password

Location:

trunk

Files:

• admin/profile.php (modified) (1 diff)
• admin/themes/default/template/profile_content.tpl (modified) (1 diff)
• profile.php (modified) (2 diffs)

trunk/admin/profile.php

@@ -26 +26 @@
 $edit_user = build_user( $_GET['user_id'], false );
 
+if (!empty($_POST))
+{
+  check_pwg_token();
+}
+
 include_once(PHPWG_ROOT_PATH.'profile.php');
-
 
 $errors = array();

trunk/admin/themes/default/template/profile_content.tpl

@@ -104 +104 @@
 
   <p class="bottomButtons">
+    <input type="hidden" name="pwg_token" value="{$PWG_TOKEN}">
     <input class="submit" type="submit" name="validate" value="{'Submit'|@translate}">
     <input class="submit" type="reset" name="reset" value="{'Reset'|@translate}">

trunk/profile.php

@@ -36 +36 @@
   // +-----------------------------------------------------------------------+
   check_status(ACCESS_CLASSIC);
+
+  if (!empty($_POST))
+  {
+    check_pwg_token();
+  }
 
   $userdata = $user;
@@ -290 +295 @@
   trigger_action( 'load_profile_in_template', $userdata );
 
+  $template->assign('PWG_TOKEN', get_pwg_token());
   $template->assign_var_from_handle('PROFILE_CONTENT', 'profile_content');
 }