From dd358da65d37d93fb9247744a38be8e022eca755 Mon Sep 17 00:00:00 2001
From: johnnyq <johnny@pittpc.com>
Date: Fri, 24 Jul 2026 13:22:17 -0400
Subject: [PATCH] Update missing CSRF endpoint checks missed update_db

---
 admin/update.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/admin/update.php b/admin/update.php
index fe22da40..64f3c528 100644
--- a/admin/update.php
+++ b/admin/update.php
@@ -39,7 +39,7 @@ $git_log = shell_exec("git log $repo_branch..origin/$repo_branch --pretty=format
                     <p class="text-center font-weight-bold">Ignore this warning at your own risk.</p>
                 </div>
                 <br>
-                <a class="btn btn-dark btn-lg my-4" href="post.php?update_db"><i class="fas fa-fw fa-4x fa-download mb-1"></i><h5>Update Database</h5></a>
+                <a class="btn btn-dark btn-lg my-4" href="post.php?update_db<?= $_SESSION['csrf_token'] ?>"><i class="fas fa-fw fa-4x fa-download mb-1"></i><h5>Update Database</h5></a>
                 <br>
                 <small class="text-secondary">Current DB Version: <?php echo CURRENT_DATABASE_VERSION; ?></small>
                 <br>