Changeset 6903 for branches/2.1/admin/profile.php

Timestamp:

Sep 13, 2010, 10:17:41 PM (14 years ago)

Author:

nikrou

Message:

Fix bug 1856 : CSRF issue that allow to change admin password
Merge from trunk

File:

• branches/2.1/admin/profile.php (modified) (1 diff)

branches/2.1/admin/profile.php

@@ -26 +26 @@
 $edit_user = build_user( $_GET['user_id'], false );
 
+if (!empty($_POST))
+{
+  check_pwg_token();
+}
+
 include_once(PHPWG_ROOT_PATH.'profile.php');
-
 
 $errors = array();