Add CSRF protections

2014-05-28 15:14:52 -04:00
parent 75ab09e28b
commit 445ef6d148
60 changed files with 291 additions and 132 deletions
--- a/app/Schema/Sqlite.php
+++ b/app/Schema/Sqlite.php
@@ -209,7 +209,7 @@ function version_3($pdo)

        foreach ($results as &$result) {
            $rq = $pdo->prepare('UPDATE projects SET token=? WHERE id=?');
-            $rq->execute(array(\Model\Base::generateToken(), $result['id']));
+            $rq->execute(array(\Core\Security::generateToken(), $result['id']));
        }
    }
 }
@@ -284,6 +284,6 @@ function version_1($pdo)
    $pdo->exec("
        INSERT INTO config
        (language, webhooks_token)
-        VALUES ('en_US', '".\Model\Base::generateToken()."')
+        VALUES ('en_US', '".\Core\Security::generateToken()."')
    ");
 }