Add missing CSRF check in saveUploadDB() method

2018-01-29 11:31:54 -08:00
parent 573754c450
commit 357316cdf9
2 changed files with 2 additions and 3 deletions
--- a/app/Template/config/upload_db.php
+++ b/app/Template/config/upload_db.php
@@ -8,9 +8,7 @@
    </p>
 </div>

-<form action="<?= $this->url->href('ConfigController', 'saveUploadedDb') ?>" method="post" enctype="multipart/form-data">
-    <?= $this->form->csrf() ?>
-
+<form action="<?= $this->url->href('ConfigController', 'saveUploadedDb', [], true) ?>" method="post" enctype="multipart/form-data">
    <?= $this->form->label(t('Database file'), 'file') ?>
    <?= $this->form->file('file') ?>