Enforce CSRF for post/asset and post/account

Tiny bit of tidying
2026-02-28 02:44:53 +00:00 · 2024-09-08 22:52:38 +01:00
parent d1410ef967
commit 64684e1248
29 changed files with 64 additions and 21 deletions
--- a/client_files.php
+++ b/client_files.php
@@ -243,6 +243,7 @@ $num_of_files = mysqli_num_rows($sql);
                <?php } else { ?>

                <form id="bulkActions" action="post.php" method="post">
+                    <input type="hidden" name="csrf_token" value="<?php echo $_SESSION['csrf_token'] ?>">

                    <div class="table-responsive-sm">
                        <table class="table border">