diff options
| author | plegall <plg@piwigo.org> | 2009-12-17 01:02:44 +0000 |
|---|---|---|
| committer | plegall <plg@piwigo.org> | 2009-12-17 01:02:44 +0000 |
| commit | 587aaa02102e97f71a7dfb07ec48efc36593b924 (patch) | |
| tree | 3fe61c33a0b3cbcc08883b1939c78046ce8729c5 /admin/plugins_list.php | |
| parent | f2fa6c16d92bbf36820645cc6a39d2a128f572fc (diff) | |
bug 1328: implements check_pwg_token at plugin management level.
git-svn-id: http://piwigo.org/svn/branches/2.0@4506 68402e56-0260-453c-a942-63ccdbb3a9ee
Diffstat (limited to 'admin/plugins_list.php')
| -rw-r--r-- | admin/plugins_list.php | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/admin/plugins_list.php b/admin/plugins_list.php index 2b12f171c..708ecd889 100644 --- a/admin/plugins_list.php +++ b/admin/plugins_list.php @@ -38,6 +38,8 @@ $plugins = new plugins(); //--------------------------------------------------perform requested actions if (isset($_GET['action']) and isset($_GET['plugin']) and !is_adviser()) { + check_pwg_token(); + $page['errors'] = $plugins->perform_action($_GET['action'], $_GET['plugin']); if (empty($page['errors'])) @@ -96,7 +98,7 @@ foreach($plugins->fs_plugins as $plugin_id => $fs_plugin) array('NAME' => $display_name, 'VERSION' => $fs_plugin['version'], 'DESCRIPTION' => $desc, - 'U_ACTION' => $base_url.'&plugin='.$plugin_id); + 'U_ACTION' => $base_url.'&plugin='.$plugin_id.'&pwg_token='.get_pwg_token()); if (isset($plugins->db_plugins_by_id[$plugin_id])) { |