services: Add missing CSRF checks rename unarchive to restore

This commit is contained in:
johnnyq
2026-03-02 20:34:55 -05:00
parent b5fb14ec96
commit 6bbe887f8b
3 changed files with 6 additions and 0 deletions

View File

@@ -8,6 +8,8 @@ defined('FROM_POST_HANDLER') || die("Direct file access is not allowed");
if (isset($_POST['add_service'])) {
validateCSRFToken($_POST['csrf_token']);
enforceUserPermission('module_support', 2);
$client_id = intval($_POST['client_id']);
@@ -84,6 +86,8 @@ if (isset($_POST['add_service'])) {
if (isset($_POST['edit_service'])) {
validateCSRFToken($_POST['csrf_token']);
enforceUserPermission('module_support', 2);
$client_id = intval($_POST['client_id']);