Add CSRF protections

2014-05-28 15:14:52 -04:00
parent 75ab09e28b
commit 445ef6d148
60 changed files with 291 additions and 132 deletions
--- a/app/Templates/subtask_create.php
+++ b/app/Templates/subtask_create.php
@@ -4,6 +4,8 @@

 <form method="post" action="?controller=subtask&amp;action=save&amp;task_id=<?= $task['id'] ?>" autocomplete="off">

+    <?= Helper\form_csrf() ?>
+
    <?= Helper\form_hidden('task_id', $values) ?>

    <?= Helper\form_label(t('Title'), 'title') ?>