aboutsummaryrefslogtreecommitdiffstats
path: root/admin/cat_list.php
diff options
context:
space:
mode:
authorplegall <plg@piwigo.org>2009-12-16 21:48:09 +0000
committerplegall <plg@piwigo.org>2009-12-16 21:48:09 +0000
commitf2fa6c16d92bbf36820645cc6a39d2a128f572fc (patch)
treec9a71b2cb7677e62e8676a9a8870017a6042686b /admin/cat_list.php
parent54ed1bfcdb463c931c190045a65438931ebd9cff (diff)
bug 1328: check_pwg_token implemented on admin/cat_list forms (+delete action)
git-svn-id: http://piwigo.org/svn/branches/2.0@4505 68402e56-0260-453c-a942-63ccdbb3a9ee
Diffstat (limited to '')
-rw-r--r--admin/cat_list.php7
1 files changed, 7 insertions, 0 deletions
diff --git a/admin/cat_list.php b/admin/cat_list.php
index 43403e4f9..1aac22f0d 100644
--- a/admin/cat_list.php
+++ b/admin/cat_list.php
@@ -33,6 +33,11 @@ include_once(PHPWG_ROOT_PATH.'admin/include/functions.php');
// +-----------------------------------------------------------------------+
check_status(ACCESS_ADMINISTRATOR);
+if (!empty($_POST) or isset($_GET['delete']))
+{
+ check_pwg_token();
+}
+
// +-----------------------------------------------------------------------+
// | functions |
// +-----------------------------------------------------------------------+
@@ -163,6 +168,7 @@ if (isset($_GET['parent_id']))
$template->assign(array(
'CATEGORIES_NAV'=>$navigation,
'F_ACTION'=>$form_action,
+ 'PWG_TOKEN' => get_pwg_token(),
));
// +-----------------------------------------------------------------------+
@@ -238,6 +244,7 @@ foreach ($categories as $category)
if (empty($category['dir']))
{
$tpl_cat['U_DELETE'] = $self_url.'&amp;delete='.$category['id'];
+ $tpl_cat['U_DELETE'].= '&amp;pwg_token='.get_pwg_token();
}
if ( array_key_exists($category['id'], $categories_with_images) )