Avoid people to alter other projects by changing form data

2017-09-23 18:48:45 -07:00
parent 8ecaa60340
commit 074f6c104f
26 changed files with 154 additions and 111 deletions
--- a/app/Template/project_edit/show.php
+++ b/app/Template/project_edit/show.php
@@ -9,7 +9,6 @@
 <?php endif ?>
 <form method="post" action="<?= $this->url->href('ProjectEditController', 'update', array('project_id' => $project['id'], 'redirect' => 'edit')) ?>" autocomplete="off">
    <?= $this->form->csrf() ?>
-    <?= $this->form->hidden('id', $values) ?>

    <fieldset>
        <legend><?= t('General') ?></legend>