mirror of
https://github.com/slawkens/myaac.git
synced 2025-10-20 20:43:26 +02:00
CSRF Protection (#235)
* Fix alert class name * feature: csrf protection * Cosmetics * Fix token generate * Admin Panel: changelogs csrf protection * news/id route * Refactor admin newses + add csrf * Use admin.links instead * Admin panel: Pages csrf * Menus: better csrf + add success message on reset colors * Plugins csrf * Move definitions * add info function, same as note($message) * Update mailer.php * Fix new page/news links * clear_cache & maintenance csrf * Formatting * Fix news type * Fix changelog link * Add new changelog link * More info to confirm dialog * This is always true
This commit is contained in:
@@ -20,6 +20,7 @@
|
||||
<tr>
|
||||
<td>Are you sure you want delete guild <b>{{ guild.getName() }}</b>?<br/>
|
||||
<form action="?subtopic=guilds&guild={{ guild.getName() }}&action=delete_guild" method="post">
|
||||
{{ csrf() }}
|
||||
<input type="hidden" name="todo" value="save"/>
|
||||
<input type="submit" value="Yes, delete"/>
|
||||
</form>
|
||||
@@ -34,6 +35,7 @@
|
||||
<br/>
|
||||
<div style="text-align:center">
|
||||
<form action="?subtopic=guilds&guild={{ guild.getName() }}&action=manager" method="post">
|
||||
{{ csrf() }}
|
||||
{{ include('buttons.back.html.twig') }}
|
||||
</form>
|
||||
</div>
|
||||
</div>
|
||||
|
Reference in New Issue
Block a user