diff --git a/app/Controller/ConfigController.php b/app/Controller/ConfigController.php index 2ea04b35e..fcdd6972b 100644 --- a/app/Controller/ConfigController.php +++ b/app/Controller/ConfigController.php @@ -199,6 +199,7 @@ class ConfigController extends BaseController */ public function saveUploadedDb() { + $this->checkCSRFParam(); $filename = $this->request->getFilePath('file'); if (!file_exists($filename) || !$this->configModel->uploadDatabase($filename)) { diff --git a/app/Template/config/upload_db.php b/app/Template/config/upload_db.php index b247cf751..efc8eb28b 100644 --- a/app/Template/config/upload_db.php +++ b/app/Template/config/upload_db.php @@ -8,9 +8,7 @@
-