Extended the CSRF check.

Till Brehm

2015-06-03 5af0cfd99a13fda9afad3380b0c50a3428acd299

 interface/web/admin/language_edit.php

@@ -55,6 +55,10 @@

//* Save data
if(isset($_POST['records']) && is_array($_POST['records'])) {
	
   //* CSRF Check
   $app->auth->csrf_token_check();
	
   $file_content = "<?php\n";
   foreach($_POST['records'] as $key => $val) {
      $val = stripslashes($val);
@@ -93,6 +97,11 @@
   unset($wb);
}

//* SET csrf token
$csrf_token = $app->auth->csrf_token_get('language_edit');
$app->tpl->setVar('_csrf_id',$csrf_token['csrf_id']);
$app->tpl->setVar('_csrf_key',$csrf_token['csrf_key']);


//* load language file
$lng_file = 'lib/lang/'.$_SESSION['s']['language'].'_language_edit.lng';