Require CSRF token to edit more admin settings - thanks again to @stehled

2026-02-28 02:44:53 +00:00 · 2023-11-25 18:15:25 +00:00
parent 51ac53dc50
commit 8068cb6081
19 changed files with 54 additions and 10 deletions
--- a/settings_modules.php
+++ b/settings_modules.php
@@ -8,6 +8,7 @@ require_once "inc_all_settings.php";
        </div>
        <div class="card-body">
            <form action="post.php" method="post" autocomplete="off">
+                <input type="hidden" name="csrf_token" value="<?php echo $_SESSION['csrf_token'] ?>">

                <div class="form-group">
                    <div class="custom-control custom-switch">