Enable CSRF protection (#10447)

* Enable CSRF protection

* fix style issues
This commit is contained in:
Tony Murray
2019-07-17 07:20:26 -05:00
committed by GitHub
parent b085703b2d
commit 3ead462549
77 changed files with 105 additions and 7 deletions

View File

@@ -73,6 +73,7 @@ foreach (dbFetchRows('SELECT * FROM plugins') as $plugins) {
</td>
<td>
<form class="form-inline" role="form" action="" method="post" id="'.$plugins['plugin_id'].'" name=="'.$plugins['plugin_id'].'">
' . csrf_field() . '
<input type="hidden" name="plugin_id" value="'.$plugins['plugin_id'].'">
<input type="hidden" name="plugin_active" value="'.$plugins['plugin_active'].'">
<button type="submit" class="btn btn-sm btn-'.$plugin_button.'">'.$plugin_label.'</button>