Changeset 5195 for trunk/include/picture_comment.inc.php

Timestamp:

Mar 19, 2010, 11:25:39 PM (14 years ago)

Author:

plg

Message:

bug 1328: backport the pwg_token on trunk

bug 1329: backport the check_input_parameter on trunk

feature 1026: add pwg_token feature for edit/delete comment. Heavy refactoring
on this feature to make the code simpler and easier to maintain (I hope).

File:

• trunk/include/picture_comment.inc.php (modified) (2 diffs)

trunk/include/picture_comment.inc.php

@@ -167 +167 @@
       if (can_manage_comment('delete', $row['author_id']))
       {
-        $tpl_comment['U_DELETE'] =
-          add_url_params($url_self,
-                         array(
-                           'action'=>'delete_comment',
-                           'comment_to_delete'=>$row['id']
-                               )
-                         );
+        $tpl_comment['U_DELETE'] = add_url_params(
+          $url_self,
+          array(
+            'action'=>'delete_comment',
+            'comment_to_delete'=>$row['id'],
+            'pwg_token' => get_pwg_token(),
+            )
+          );
       }
       if (can_manage_comment('edit', $row['author_id']))
       {
-        $tpl_comment['U_EDIT'] =
-          add_url_params($url_self,
-                         array(
-                           'action'=>'edit_comment',
-                           'comment_to_edit'=>$row['id']
-                               )
-                         );
+        $tpl_comment['U_EDIT'] = add_url_params(
+          $url_self,
+          array(
+            'action'=>'edit_comment',
+            'comment_to_edit'=>$row['id'],
+            'pwg_token' => get_pwg_token(),
+            )
+          );
         if (isset($edit_comment) and ($row['id'] == $edit_comment))
         {
@@ -196 +198 @@
         if ($row['validated'] != 'true')
         {
-          $tpl_comment['U_VALIDATE'] =
-            add_url_params($url_self,
-                           array('action' => 'validate_comment',
-                                 'comment_to_validate' => $row['id']
-                                 )
-                           );
+          $tpl_comment['U_VALIDATE'] = add_url_params(
+            $url_self,
+            array(
+              'action' => 'validate_comment',
+              'comment_to_validate' => $row['id'],
+              'pwg_token' => get_pwg_token(),
+              )
+            );
         }
       }