Add CSRF Checks on Agent ajax endpoints that would update / delete or add something to the db

2026-03-11 00:04:50 +00:00 · 2026-03-05 17:12:44 -05:00
parent 994526e2c8
commit a81edc122d
13 changed files with 41 additions and 3 deletions
--- a/admin/ticket_template_details.php
+++ b/admin/ticket_template_details.php
@@ -148,6 +148,7 @@ new Sortable(document.querySelector('table#tasks tbody'), {

        $.post('/agent/ajax.php', {
            update_task_templates_order: true,
+            csrf_token: '<?= $_SESSION['csrf_token'] ?>',
            ticket_template_id: <?php echo $ticket_template_id; ?>,
            positions: positions
        });