Fix Missing CSRF in unused modals

2026-04-18 18:45:38 +00:00 · 2026-04-13 13:19:12 -04:00
parent 9c0c8ec239
commit 4e862053e8
5 changed files with 6 additions and 0 deletions
--- a/admin/modals/contract_template/contract_template_add.php
+++ b/admin/modals/contract_template/contract_template_add.php
@@ -30,6 +30,8 @@ ob_start();
 </ul>

 <form action="post.php" method="post" autocomplete="off">
+    <input type="hidden" name="csrf_token" value="<?php echo $_SESSION['csrf_token'] ?>">
+
    <div class="modal-body">
        <div class="tab-content" id="contractTemplateTabContent">