Till Brehm
2015-06-03 69a57d959dc422eaa4d10ba7005bd884b87b5fdf
Added csrf protection to dns wizard.
1 files modified
10 ■■■■■ changed files
interface/web/dns/dns_wizard.php 10 ●●●●● patch | view | raw | blame | history
interface/web/dns/dns_wizard.php
@@ -129,7 +129,10 @@
}
if($_POST['create'] == 1) {
    //* CSRF Check
    $app->auth->csrf_token_check();
    $error = '';
    // apply filters
@@ -287,6 +290,11 @@
$app->tpl->setVar("title", 'DNS Wizard');
//* SET csrf token
$csrf_token = $app->auth->csrf_token_get('dns_wizard');
$app->tpl->setVar('_csrf_id',$csrf_token['csrf_id']);
$app->tpl->setVar('_csrf_key',$csrf_token['csrf_key']);
$lng_file = 'lib/lang/'.$_SESSION['s']['language'].'_dns_wizard.lng';
include $lng_file;
$app->tpl->setVar($wb);