mirror of
https://github.com/itflow-org/itflow
synced 2026-07-26 10:17:15 +00:00
Update missing CSRF endpoint checks
This commit is contained in:
@@ -293,6 +293,8 @@ if (isset($_POST['restore_user'])) {
|
||||
|
||||
if (isset($_POST['export_users_csv'])) {
|
||||
|
||||
validateCSRFToken($_POST['csrf_token']);
|
||||
|
||||
//get records from database
|
||||
$sql = mysqli_query($mysqli, "SELECT * FROM users LEFT JOIN user_roles ON user_role_id = role_id ORDER BY user_name ASC");
|
||||
|
||||
|
||||
Reference in New Issue
Block a user