Add CSRF protections

2014-05-28 15:14:52 -04:00
parent 75ab09e28b
commit 445ef6d148
60 changed files with 291 additions and 132 deletions
--- a/app/Controller/Action.php
+++ b/app/Controller/Action.php
@@ -129,6 +129,7 @@ class Action extends Base
     */
    public function remove()
    {
+        $this->checkCSRFParam();
        $action = $this->action->getById($this->request->getIntegerParam('action_id'));

        if ($action && $this->action->remove($action['id'])) {