Add missing CSRF check in saveUploadDB() method

2018-01-29 11:31:54 -08:00
parent 573754c450
commit 357316cdf9
2 changed files with 2 additions and 3 deletions
--- a/app/Controller/ConfigController.php
+++ b/app/Controller/ConfigController.php
@@ -199,6 +199,7 @@ class ConfigController extends BaseController
     */
    public function saveUploadedDb()
    {
+        $this->checkCSRFParam();
        $filename = $this->request->getFilePath('file');

        if (!file_exists($filename) || !$this->configModel->uploadDatabase($filename)) {