Ignore:
Timestamp:
Mar 16, 2011, 1:45:47 AM (14 years ago)
Author:
patdenice
Message:

Add pwg_token to ajax request.

Location:
extensions/autoupdate/trunk
Files:
7 edited

Legend:

Unmodified
Added
Removed
  • extensions/autoupdate/trunk/ajax/ignore_list.php

    r9712 r9723  
    77
    88check_status(ACCESS_ADMINISTRATOR);
     9check_pwg_token();
    910
    1011if (isset($_POST['reset']))
  • extensions/autoupdate/trunk/ajax/update_language.php

    r9712 r9723  
    77
    88check_status(ACCESS_ADMINISTRATOR);
     9check_pwg_token();
    910
    1011if (!is_webmaster())
  • extensions/autoupdate/trunk/ajax/update_plugin.php

    r9712 r9723  
    1010
    1111check_status(ACCESS_ADMINISTRATOR);
     12check_pwg_token();
    1213
    1314if (!is_webmaster())
     
    8889    . '?revision=' . $revision
    8990    . '&id=' . $plugin_id
    90     . '&reactivate=true');
     91    . '&reactivate=true'
     92    . '&pwg_token=' . get_pwg_token()
     93  );
    9194}
    9295
     
    104107  . '?id=' . $plugin_id
    105108  . '&upgradestatus='.$upgrade_status
     109  . '&pwg_token=' . get_pwg_token()
    106110);
    107111
  • extensions/autoupdate/trunk/ajax/update_theme.php

    r9712 r9723  
    77
    88check_status(ACCESS_ADMINISTRATOR);
     9check_pwg_token();
    910
    1011if (!is_webmaster())
  • extensions/autoupdate/trunk/template/autoupdate.js

    r9721 r9723  
    1515  jQuery.post(
    1616    "plugins/autoupdate/ajax/ignore_list.php",
    17     { reset: true },
     17    { reset: true, pwg_token: pwg_token },
    1818    function(data) {
    1919      if (data == "ok") {
     
    6060    type: 'POST',
    6161    url: 'plugins/autoupdate/ajax/update_'+type+'.php',
    62     data: { id: id, revision: revision },
     62    data: { id: id, revision: revision, pwg_token: pwg_token },
    6363    success: function(data) {
    6464      if (data['result']) {
     
    109109  jQuery.post(
    110110    "plugins/autoupdate/ajax/ignore_list.php",
    111     { type: type+'s', id: id },
     111    { type: type+'s', id: id, pwg_token: pwg_token },
    112112    function(data) {
    113113      if (data == "ok") {
  • extensions/autoupdate/trunk/template/update_ext.tpl

    r9721 r9723  
    44
    55{footer_script require='jquery.autoupdate,jquery.effects.blind,jquery.jgrowl'}
     6var pwg_token = '{$PWG_TOKEN}';
    67var extList = new Array();
    78var confirmMsg  = '{'Are you sure?'|@translate|@escape:'javascript'}';
  • extensions/autoupdate/trunk/update_ext.inc.php

    r9712 r9723  
    112112$template->assign('update_languages', $update_languages);
    113113$template->assign('SHOW_RESET', (!empty($conf['AU_ignore']['plugins']) or !empty($conf['AU_ignore']['themes']) or !empty($conf['AU_ignore']['languages'])));
     114$template->assign('PWG_TOKEN', get_pwg_token());
    114115$template->set_filename('plugin_admin_content', realpath(AUTOUPDATE_PATH.'template/update_ext.tpl'));
    115116$template->assign_var_from_handle('ADMIN_CONTENT', 'plugin_admin_content');
Note: See TracChangeset for help on using the changeset viewer.