Changeset 4540 for extensions/PWG_Stuffs

Timestamp:

Dec 21, 2009, 2:21:29 PM (14 years ago)

Author:

patdenice

Message:

[Plugin] [PWG Stuffs]
Implement check_pwg_token for last comments block.

Location:

extensions/PWG_Stuffs

Files:

• admin/functions.inc.php (modified) (1 diff)
• modules/LastComs/main.inc.php (modified) (4 diffs)
• template/LastComs.tpl (modified) (1 diff)

extensions/PWG_Stuffs/admin/functions.inc.php

@@ -5 +5 @@
         $dir = opendir(STUFFS_PATH . 'modules/');
     while ($file = readdir($dir)) {
-        if ($file != '.' and $file != '..') {
+        if ($file != '.' and $file != '..' and $file != '.svn') {
             $path = STUFFS_PATH . 'modules/' . $file;
             if (is_dir($path) and !is_link($path)) {

extensions/PWG_Stuffs/modules/LastComs/main.inc.php

@@ -11 +11 @@
 {
     check_status(ACCESS_ADMINISTRATOR);
+    check_pwg_token();
     $query = '
 DELETE FROM ' . COMMENTS_TABLE . '
@@ -22 +23 @@
 {
     check_status(ACCESS_ADMINISTRATOR);
+    check_pwg_token();
     $query = '
 UPDATE ' . COMMENTS_TABLE . '
@@ -154 +156 @@
     {
       $url = get_root_url().'index.php'.get_query_string_diff(array('delete','validate'));
-      $tpl_comment['U_DELETE'] = add_url_params($url,
-                          array('delete'=>$comment['comment_id'])
-                         );
+      $tpl_comment['U_DELETE'] = add_url_params($url, array(
+            'delete' => $comment['comment_id'],
+            'pwg_token' => get_pwg_token()));
 
-      if ($comment['validated'] != 'true')
+            if ($comment['validated'] != 'true')
       {
-        $tpl_comment['U_VALIDATE'] = add_url_params($url,
-                            array('validate'=>$comment['comment_id'])
-                           );
+        $tpl_comment['U_VALIDATE'] = add_url_params($url, array(
+            'validate' => $comment['comment_id'],
+            'pwg_token' => get_pwg_token()));
       }
     }
@@ -172 +174 @@
       $tpl_comment['U_EDIT'] = add_url_params(get_root_url() . 'index.php', array(
             CE_ACTION => CE_ACTION_EDIT,
-            CE_ID => $comment['comment_id']));
+            CE_ID => $comment['comment_id'],
+            'pwg_token' => get_pwg_token()));
     }
     array_push($block['comments'], $tpl_comment);

extensions/PWG_Stuffs/template/LastComs.tpl

@@ -32 +32 @@
       {/if}
       <span class="author">{$comment.AUTHOR}</span> - <span class="date">{$comment.DATE}</span>
-      {if !empty($comment.U_EDIT)}- <a href="{$comment.U_EDIT}">{'ce_edit_tool'|@translate}{/if}
+      {if !empty($comment.U_EDIT)}- <a href="{$comment.U_EDIT}">{'ce_edit_tool'|@translate}</a>{/if}
       <blockquote>{$comment.CONTENT}</blockquote>
     </div>