Enforce CSRF for post/asset and post/account

Tiny bit of tidying
2026-02-28 19:04:52 +00:00 · 2024-09-08 22:52:38 +01:00
parent d1410ef967
commit 64684e1248
29 changed files with 64 additions and 21 deletions
--- a/client_asset_transfer_modal.php
+++ b/client_asset_transfer_modal.php
@@ -8,7 +8,9 @@
                </button>
            </div>
            <form action="post.php" method="post" autocomplete="off">
+                <input type="hidden" name="csrf_token" value="<?php echo $_SESSION['csrf_token'] ?>">
                <input type="hidden" name="current_asset_id" value="<?php echo $asset_id; ?>">
+
                <div class="modal-body bg-white">

                    <div class="form-group">