mirror of
https://github.com/itflow-org/itflow
synced 2026-02-28 19:04:52 +00:00
Require CSRF token to edit Stripe settings - thanks to @stehled
This commit is contained in:
@@ -331,6 +331,7 @@ if (isset($_GET['generate_cron_key'])) {
|
||||
|
||||
if (isset($_POST['edit_online_payment_settings'])) {
|
||||
|
||||
validateCSRFToken($_POST['csrf_token']);
|
||||
validateAdminRole();
|
||||
|
||||
$config_stripe_enable = intval($_POST['config_stripe_enable']);
|
||||
|
||||
Reference in New Issue
Block a user