Changeset 4509

Timestamp:

Dec 18, 2009, 12:00:09 AM (14 years ago)

Author:

plg

Message:

bug 1328: implements check_pwg_token for comment deletion on picture.php

Location:

branches/2.0

Files:

• include/picture_comment.inc.php (modified) (1 diff)
• picture.php (modified) (1 diff)

branches/2.0/include/picture_comment.inc.php

@@ -150 +150 @@
                   array(
                     'action'=>'delete_comment',
-                    'comment_to_delete'=>$row['id']
+                    'comment_to_delete'=>$row['id'],
+                    'pwg_token'=>get_pwg_token(),
                   )
               );

branches/2.0/picture.php

@@ -310 +310 @@
     case 'delete_comment' :
     {
+      check_pwg_token();
+      
       if (isset($_GET['comment_to_delete'])
           and is_numeric($_GET['comment_to_delete'])