Fix Missing CSRF in unused modals

2026-04-18 18:45:38 +00:00 · 2026-04-13 13:19:12 -04:00
parent 9c0c8ec239
commit 4e862053e8
5 changed files with 6 additions and 0 deletions
--- a/admin/modals/custom_field/custom_field_create.php
+++ b/admin/modals/custom_field/custom_field_create.php
@@ -8,6 +8,7 @@
                </button>
            </div>
            <form action="post.php" method="post" autocomplete="off">
+                <input type="hidden" name="csrf_token" value="<?php echo $_SESSION['csrf_token'] ?>">
                <input type="hidden" name="table" value="<?php echo nullable_htmlentities($table); ?>">

                <div class="modal-body">