Skip to content
GitLab
Projects
Groups
Snippets
/
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
Menu
Open sidebar
Dirk Dankhoff
ISPConfig 3
Commits
69a57d95
Commit
69a57d95
authored
Jun 03, 2015
by
Till Brehm
Browse files
Added csrf protection to dns wizard.
parent
99e9ac79
Changes
1
Hide whitespace changes
Inline
Side-by-side
interface/web/dns/dns_wizard.php
View file @
69a57d95
...
...
@@ -129,7 +129,10 @@ if(is_array($fields)) {
}
if
(
$_POST
[
'create'
]
==
1
)
{
//* CSRF Check
$app
->
auth
->
csrf_token_check
();
$error
=
''
;
// apply filters
...
...
@@ -287,6 +290,11 @@ if($_POST['create'] == 1) {
$app
->
tpl
->
setVar
(
"title"
,
'DNS Wizard'
);
//* SET csrf token
$csrf_token
=
$app
->
auth
->
csrf_token_get
(
'dns_wizard'
);
$app
->
tpl
->
setVar
(
'_csrf_id'
,
$csrf_token
[
'csrf_id'
]);
$app
->
tpl
->
setVar
(
'_csrf_key'
,
$csrf_token
[
'csrf_key'
]);
$lng_file
=
'lib/lang/'
.
$_SESSION
[
's'
][
'language'
]
.
'_dns_wizard.lng'
;
include
$lng_file
;
$app
->
tpl
->
setVar
(
$wb
);
...
...
Write
Preview
Supports
Markdown
0%
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment