From 8cb6f8ffd31ec33479c9696c5263b7a8e27fe273 Mon Sep 17 00:00:00 2001 From: Marius Cramer <m.cramer@pixcept.de> Date: Fri, 05 Jun 2015 04:40:23 -0400 Subject: [PATCH] Merge branch 'stable-3.0.5' --- interface/web/tools/resync.php | 11 ++++++++++- 1 files changed, 10 insertions(+), 1 deletions(-) diff --git a/interface/web/tools/resync.php b/interface/web/tools/resync.php index e99e511..2e6af49 100644 --- a/interface/web/tools/resync.php +++ b/interface/web/tools/resync.php @@ -368,6 +368,10 @@ } } + $csrf_token = $app->auth->csrf_token_get('tools_resync'); + $app->tpl->setVar('_csrf_id', $csrf_token['csrf_id']); + $app->tpl->setVar('_csrf_key', $csrf_token['csrf_key']); + parent::onShowEnd(); } @@ -418,7 +422,12 @@ function onSubmit() { global $app; - + + if(isset($_POST) && count($_POST) > 1) { + //* CSRF Check + $app->auth->csrf_token_check(); + } + //* all services if($this->dataRecord['resync_all'] == 1) { $this->dataRecord['resync_sites'] = 1; -- Gitblit v1.9.1