archive/piwigo
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix bug 1856 : CSRF issue that allow to change admin password

Browse source 
git-svn-id: http://piwigo.org/svn/trunk@6897 68402e56-0260-453c-a942-63ccdbb3a9ee
This commit is contained in:
nikrou 2010-09-13 19:40:42 +00:00
commit 5421126743
3 changed files with 12 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

6
admin/profile.php
View file

@ -25,8 +25,12 @@ if( !defined("PHPWG_ROOT_PATH") ) die ("Hacking attempt!");
$edit_user = build_user( $_GET['user_id'], false );
include_once(PHPWG_ROOT_PATH.'profile.php');
if (!empty($_POST))
{
check_pwg_token();
}
include_once(PHPWG_ROOT_PATH.'profile.php');
$errors = array();
if ( !is_adviser() )