Added csrf protection to dns wizard.

Till Brehm

2015-06-03 69a57d959dc422eaa4d10ba7005bd884b87b5fdf

 interface/web/dns/dns_wizard.php

@@ -129,7 +129,10 @@
}

if($_POST['create'] == 1) {

	
   //* CSRF Check
   $app->auth->csrf_token_check();
	
   $error = '';

   // apply filters
@@ -287,6 +290,11 @@

$app->tpl->setVar("title", 'DNS Wizard');

//* SET csrf token
$csrf_token = $app->auth->csrf_token_get('dns_wizard');
$app->tpl->setVar('_csrf_id',$csrf_token['csrf_id']);
$app->tpl->setVar('_csrf_key',$csrf_token['csrf_key']);

$lng_file = 'lib/lang/'.$_SESSION['s']['language'].'_dns_wizard.lng';
include $lng_file;
$app->tpl->setVar($wb);