Changeset 4505 for branches

Timestamp:

Dec 16, 2009, 10:48:09 PM (14 years ago)

Author:

plg

Message:

bug 1328: check_pwg_token implemented on admin/cat_list forms (+delete action)

Location:

branches/2.0/admin

Files:

• cat_list.php (modified) (3 diffs)
• template/goto/cat_list.tpl (modified) (2 diffs)

branches/2.0/admin/cat_list.php

@@ -34 +34 @@
 check_status(ACCESS_ADMINISTRATOR);
 
+if (!empty($_POST) or isset($_GET['delete']))
+{
+  check_pwg_token();
+}
+
 // +-----------------------------------------------------------------------+
 // |                               functions                               |
@@ -164 +169 @@
   'CATEGORIES_NAV'=>$navigation,
   'F_ACTION'=>$form_action,
+  'PWG_TOKEN' => get_pwg_token(),
  ));
 
@@ -239 +245 @@
   {
     $tpl_cat['U_DELETE'] = $self_url.'&delete='.$category['id'];
+    $tpl_cat['U_DELETE'].= '&pwg_token='.get_pwg_token();
   }
 

branches/2.0/admin/template/goto/cat_list.tpl

@@ -28 +28 @@
 
 <form id="addVirtual" action="{$F_ACTION}" method="post">
+  <input type="hidden" name="pwg_token" value="{$PWG_TOKEN}" />
   <p>
     {'cat_add'|@translate} : <input type="text" name="virtual_name" />
@@ -40 +41 @@
 {if count($categories) }
 <form id="categoryOrdering" action="{$F_ACTION}" method="post">
+  <input type="hidden" name="pwg_token" value="{$PWG_TOKEN}" />
   <p>
     <input class="submit" name="submitOrder" type="submit" value="{'Save order'|@translate}" {$TAG_INPUT_ENABLED} />