mirror/librenms-librenms
1
0
Fork 0
mirror of https://github.com/librenms/librenms.git synced 2024-10-07 16:52:45 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Enable CSRF protection (#10447)

Browse Source 
* Enable CSRF protection

* fix style issues
This commit is contained in:
Tony Murray
2019-07-17 07:20:26 -05:00
committed by GitHub
parent b085703b2d
commit 3ead462549
77 changed files with 105 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
includes/html/pages/bill/edit.inc.php
View File

@@ -69,6 +69,7 @@ if ($bill_data['bill_type'] == 'cdr') {
</div>
<div class="panel-body">
<form id="edit" name="edit" method="post" action="" class="form-horizontal" role="form">
<?php echo csrf_field() ?>
<input type=hidden name="action" value="update_bill">
<script type="text/javascript">
function billType() {
@@ -113,6 +114,7 @@ if ($bill_data['bill_type'] == 'cdr') {
?>
<div class="list-group-item">
<form action="" class="form-inline" method="post" name="delete<?php echo $port['port_id'] ?>" style="display: none;">
<?php echo csrf_field() ?>
<input type="hidden" name="action" value="delete_bill_port" />
<input type="hidden" name="port_id" value="<?php echo $port['port_id'] ?>" />
</form>
@@ -140,6 +142,7 @@ if (!$emptyCheck) { ?>
<h4>Add Port</h4>
<form action="" method="post" class="form-horizontal" role="form">
<?php echo csrf_field() ?>
<input type="hidden" name="action" value="add_bill_port" />
<input type="hidden" name="bill_id" value="<?php echo $bill_id; ?>" />