Add CSRF protections

2014-05-28 15:14:52 -04:00
parent 75ab09e28b
commit 445ef6d148
60 changed files with 291 additions and 132 deletions
--- a/app/Controller/Task.php
+++ b/app/Controller/Task.php
@@ -218,6 +218,7 @@ class Task extends Base
     */
    public function close()
    {
+        $this->checkCSRFParam();
        $task = $this->getTask();

        if ($this->task->close($task['id'])) {
@@ -252,6 +253,7 @@ class Task extends Base
     */
    public function open()
    {
+        $this->checkCSRFParam();
        $task = $this->getTask();

        if ($this->task->open($task['id'])) {
@@ -286,6 +288,7 @@ class Task extends Base
     */
    public function remove()
    {
+        $this->checkCSRFParam();
        $task = $this->getTask();

        if ($this->task->remove($task['id'])) {