Changeset 4505


Ignore:
Timestamp:
Dec 16, 2009, 10:48:09 PM (11 years ago)
Author:
plg
Message:

bug 1328: check_pwg_token implemented on admin/cat_list forms (+delete action)

Location:
branches/2.0/admin
Files:
2 edited

Legend:

Unmodified
Added
Removed
  • branches/2.0/admin/cat_list.php

    r4495 r4505  
    3434check_status(ACCESS_ADMINISTRATOR);
    3535
     36if (!empty($_POST) or isset($_GET['delete']))
     37{
     38  check_pwg_token();
     39}
     40
    3641// +-----------------------------------------------------------------------+
    3742// |                               functions                               |
     
    164169  'CATEGORIES_NAV'=>$navigation,
    165170  'F_ACTION'=>$form_action,
     171  'PWG_TOKEN' => get_pwg_token(),
    166172 ));
    167173
     
    239245  {
    240246    $tpl_cat['U_DELETE'] = $self_url.'&delete='.$category['id'];
     247    $tpl_cat['U_DELETE'].= '&pwg_token='.get_pwg_token();
    241248  }
    242249
  • branches/2.0/admin/template/goto/cat_list.tpl

    r2947 r4505  
    2828
    2929<form id="addVirtual" action="{$F_ACTION}" method="post">
     30  <input type="hidden" name="pwg_token" value="{$PWG_TOKEN}" />
    3031  <p>
    3132    {'cat_add'|@translate} : <input type="text" name="virtual_name" />
     
    4041{if count($categories) }
    4142<form id="categoryOrdering" action="{$F_ACTION}" method="post">
     43  <input type="hidden" name="pwg_token" value="{$PWG_TOKEN}" />
    4244  <p>
    4345    <input class="submit" name="submitOrder" type="submit" value="{'Save order'|@translate}" {$TAG_INPUT_ENABLED} />
Note: See TracChangeset for help on using the changeset viewer.