Require CSRF token to edit more admin settings - thanks again to @stehled

2026-02-28 02:44:53 +00:00 · 2023-11-25 18:15:25 +00:00
parent 51ac53dc50
commit 8068cb6081
19 changed files with 54 additions and 10 deletions
--- a/settings_localization.php
+++ b/settings_localization.php
@@ -19,6 +19,7 @@ $timezones = DateTimeZone::listIdentifiers();
        </div>
        <div class="card-body">
            <form action="post.php" method="post" autocomplete="off">
+                <input type="hidden" name="csrf_token" value="<?php echo $_SESSION['csrf_token'] ?>">

                <div class="form-group">
                    <label>Language <strong class="text-danger">*</strong></label>