headers.php included and csrf POST added

This commit is contained in:
Matt Pass
2014-04-18 18:10:50 +01:00
parent a15dfda92c
commit b45817ec65

View File

@@ -1,4 +1,7 @@
<?php include("settings.php");?>
<?php
include("headers.php");
include("settings.php");
?>
<script>
<?php
// Get the save type if any
@@ -423,6 +426,7 @@ if (action=="load") {
<form name="saveFile" action="file-control.php?action=save&file=<?php if (isset($file)) {echo $file;}; if (isset($_GET['fileMDT']) && $_GET['fileMDT']!="undefined") {echo "&fileMDT=".numClean($_GET['fileMDT']);};?>" method="POST">
<textarea name="contents"></textarea>
<input type="hidden" name="newFileName" value="">
<input type="hidden" name="csrf" value="<?php echo $_SESSION["csrf"]; ?>">
</form>
<script>