Mirrors/ICEcoder
2
0
Fork 0
mirror of https://github.com/icecoder/ICEcoder.git synced 2026-03-11 19:16:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Include headers lib & csrf hidden form field

Browse Source 
To help protect against CSRF and clickjacking
Also include hidden form field containing this for postback
top.ICEcoder.csrf also set
This commit is contained in:
Matt Pass
2014-04-18 17:57:54 +01:00
parent 3d89af7e17
commit a3c0243772
13 changed files with 48 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
lib/settings-screen.php
View File

@@ -1,4 +1,7 @@
<?php include("settings.php");?>
<?php
include("headers.php");
include("settings.php");
?>
<!DOCTYPE html>
<html>
@@ -268,6 +271,7 @@ var validatePasswords = function() {
</div>
<input type="hidden" name="csrf" value="<?php echo $_SESSION["csrf"]; ?>">
</form>
</body>