diff --git a/interface/web/dns/dns_wizard.php b/interface/web/dns/dns_wizard.php index a1cf17b263996bcdd4d52765d85c422fa600ad90..b950f2957416fa8c8952f2ca6521c8e0922e5bd2 100644 --- a/interface/web/dns/dns_wizard.php +++ b/interface/web/dns/dns_wizard.php @@ -129,7 +129,10 @@ if(is_array($fields)) { } if($_POST['create'] == 1) { - + + //* CSRF Check + $app->auth->csrf_token_check(); + $error = ''; // apply filters @@ -287,6 +290,11 @@ if($_POST['create'] == 1) { $app->tpl->setVar("title", 'DNS Wizard'); +//* SET csrf token +$csrf_token = $app->auth->csrf_token_get('dns_wizard'); +$app->tpl->setVar('_csrf_id',$csrf_token['csrf_id']); +$app->tpl->setVar('_csrf_key',$csrf_token['csrf_key']); + $lng_file = 'lib/lang/'.$_SESSION['s']['language'].'_dns_wizard.lng'; include $lng_file; $app->tpl->setVar($wb);