From 587aaa02102e97f71a7dfb07ec48efc36593b924 Mon Sep 17 00:00:00 2001 From: plegall Date: Thu, 17 Dec 2009 01:02:44 +0000 Subject: bug 1328: implements check_pwg_token at plugin management level. git-svn-id: http://piwigo.org/svn/branches/2.0@4506 68402e56-0260-453c-a942-63ccdbb3a9ee --- admin/plugins_list.php | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'admin/plugins_list.php') diff --git a/admin/plugins_list.php b/admin/plugins_list.php index 2b12f171c..708ecd889 100644 --- a/admin/plugins_list.php +++ b/admin/plugins_list.php @@ -38,6 +38,8 @@ $plugins = new plugins(); //--------------------------------------------------perform requested actions if (isset($_GET['action']) and isset($_GET['plugin']) and !is_adviser()) { + check_pwg_token(); + $page['errors'] = $plugins->perform_action($_GET['action'], $_GET['plugin']); if (empty($page['errors'])) @@ -96,7 +98,7 @@ foreach($plugins->fs_plugins as $plugin_id => $fs_plugin) array('NAME' => $display_name, 'VERSION' => $fs_plugin['version'], 'DESCRIPTION' => $desc, - 'U_ACTION' => $base_url.'&plugin='.$plugin_id); + 'U_ACTION' => $base_url.'&plugin='.$plugin_id.'&pwg_token='.get_pwg_token()); if (isset($plugins->db_plugins_by_id[$plugin_id])) { -- cgit v1.2.3