Enforce CSRF for post/asset and post/account

Tiny bit of tidying
2026-02-28 19:04:52 +00:00 · 2024-09-08 22:52:38 +01:00
parent d1410ef967
commit 64684e1248
29 changed files with 64 additions and 21 deletions
--- a/admin_bulk_mail.php
+++ b/admin_bulk_mail.php
@@ -28,6 +28,7 @@ $sql = mysqli_query($mysqli, "SELECT * FROM contacts
    </div>
    <div class="card-body">
        <form id="bulkActions" action="post.php" method="post">
+            <input type="hidden" name="csrf_token" value="<?php echo $_SESSION['csrf_token'] ?>">

            <div class="row">