Changeset 6897 for trunk/admin/profile.php

Timestamp:

Sep 13, 2010, 9:40:42 PM (14 years ago)

Author:

nikrou

Message:

Fix bug 1856 : CSRF issue that allow to change admin password

File:

• trunk/admin/profile.php (modified) (1 diff)

trunk/admin/profile.php

@@ -26 +26 @@
 $edit_user = build_user( $_GET['user_id'], false );
 
+if (!empty($_POST))
+{
+  check_pwg_token();
+}
+
 include_once(PHPWG_ROOT_PATH.'profile.php');
-
 
 $errors = array();