Client: Add missing CSRF checks, and missing enforcements

This commit is contained in:
johnnyq
2026-03-01 20:42:18 -05:00
parent ae81092112
commit ef1b65de09
5 changed files with 17 additions and 2 deletions

View File

@@ -39,7 +39,8 @@ ob_start();
</div>
<form action="post.php" method="post" autocomplete="off">
<input type="hidden" name="client_id" value="<?php echo $client_id; ?>">
<input type="hidden" name="csrf_token" value="<?= $_SESSION['csrf_token'] ?>">
<input type="hidden" name="client_id" value="<?= $client_id ?>">
<ul class="modal-header nav nav-pills nav-justified mb-3">
<li class="nav-item">