Contacts: Add missing CSRF checks, add missing permission checks, renamed unarchive to restore

2026-03-24 14:35:38 +00:00 · 2026-03-02 18:28:53 -05:00
parent ad16e92763
commit d936339f07
16 changed files with 115 additions and 43 deletions
--- a/agent/modals/contact/contact_add.php
+++ b/agent/modals/contact/contact_add.php
@@ -23,6 +23,8 @@ ob_start();
    </button>
 </div>
 <form action="post.php" method="post" enctype="multipart/form-data" autocomplete="off">
+    <input type="hidden" name="csrf_token" value="<?= $_SESSION['csrf_token'] ?>">
+
    <div class="modal-body">

        <ul class="nav nav-pills nav-justified mb-3">