Skip to content

Commit 2c03df2

Browse files
author
Marius Burkard
committed
Merge branch 'bugfix/5523-deleting-qa-triggers-csrf-protection' into 'stable-3.1'
Add CSRF key and token to FAQ delete links See merge request ispconfig/ispconfig3!968
2 parents 5a5dc30 + 53e799e commit 2c03df2

File tree

2 files changed

+2
-2
lines changed

2 files changed

+2
-2
lines changed

interface/web/help/templates/faq_manage_questions_list.htm

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ <h1>{tmpl_var name="faq_faq_questions_txt"}</h1>
2424
<td width="60%">{tmpl_var name='hf_question'}</td>
2525
<td width="30%">{tmpl_var name='hf_section'}</td>
2626
<td class="text-right" width="5%">
27-
<a class="btn btn-default formbutton-danger formbutton-narrow" href="javascript: ISPConfig.confirm_action('help/faq_delete.php?id={tmpl_var name='id'}&phpsessid={tmpl_var name='phpsessid'}','{tmpl_var name='delete_confirmation'}');"><span class="icon icon-delete"></span></a>
27+
<a class="btn btn-default formbutton-danger formbutton-narrow" href="javascript: ISPConfig.confirm_action('help/faq_delete.php?id={tmpl_var name='id'}&_csrf_id={tmpl_var name='csrf_id'}&_csrf_key={tmpl_var name='csrf_key'}&phpsessid={tmpl_var name='phpsessid'}','{tmpl_var name='delete_confirmation'}');"><span class="icon icon-delete"></span></a>
2828
</td>
2929
<td class="text-right" width="5%">
3030
<a class="btn btn-default formbutton-default formbutton-narrow" data-load-content="help/faq_edit.php?id={tmpl_var name='id'}"><span class="icon icon-edit"></span></a>

interface/web/help/templates/help_faq_sections_list.htm

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ <h1><tmpl_var name="faq_faq_sections_txt"></h1>
2626
<tr>
2727
<td><b>{tmpl_var name='hfs_name'}</b></td>
2828
<td class="text-right">
29-
<a class="btn btn-default formbutton-danger formbutton-narrow" href="javascript: ISPConfig.confirm_action('help/faq_sections_delete.php?id={tmpl_var name='id'}&phpsessid={tmpl_var name='phpsessid'}','{tmpl_var name='delete_confirmation'}');"><span class="icon icon-delete"></span></a>
29+
<a class="btn btn-default formbutton-danger formbutton-narrow" href="javascript: ISPConfig.confirm_action('help/faq_sections_delete.php?id={tmpl_var name='id'}&_csrf_id={tmpl_var name='csrf_id'}&_csrf_key={tmpl_var name='csrf_key'}&phpsessid={tmpl_var name='phpsessid'}','{tmpl_var name='delete_confirmation'}');"><span class="icon icon-delete"></span></a>
3030
</td>
3131
<td class="text-right">
3232
<a class="btn btn-default formbutton-default formbutton-narrow" data-load-content="help/faq_sections_edit.php?id={tmpl_var name='id'}"><span class="icon icon-edit"></span></a>

0 commit comments

Comments
 (0)