Skip to content

Commit 53e799e

Browse files
WebsliceMarius Burkard
authored andcommitted
Add CSRF key and token to FAQ delete links
1 parent 5a5dc30 commit 53e799e

File tree

2 files changed

+2
-2
lines changed

2 files changed

+2
-2
lines changed

interface/web/help/templates/faq_manage_questions_list.htm

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ <h1>{tmpl_var name="faq_faq_questions_txt"}</h1>
2424
<td width="60%">{tmpl_var name='hf_question'}</td>
2525
<td width="30%">{tmpl_var name='hf_section'}</td>
2626
<td class="text-right" width="5%">
27-
<a class="btn btn-default formbutton-danger formbutton-narrow" href="javascript: ISPConfig.confirm_action('help/faq_delete.php?id={tmpl_var name='id'}&phpsessid={tmpl_var name='phpsessid'}','{tmpl_var name='delete_confirmation'}');"><span class="icon icon-delete"></span></a>
27+
<a class="btn btn-default formbutton-danger formbutton-narrow" href="javascript: ISPConfig.confirm_action('help/faq_delete.php?id={tmpl_var name='id'}&_csrf_id={tmpl_var name='csrf_id'}&_csrf_key={tmpl_var name='csrf_key'}&phpsessid={tmpl_var name='phpsessid'}','{tmpl_var name='delete_confirmation'}');"><span class="icon icon-delete"></span></a>
2828
</td>
2929
<td class="text-right" width="5%">
3030
<a class="btn btn-default formbutton-default formbutton-narrow" data-load-content="help/faq_edit.php?id={tmpl_var name='id'}"><span class="icon icon-edit"></span></a>

interface/web/help/templates/help_faq_sections_list.htm

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ <h1><tmpl_var name="faq_faq_sections_txt"></h1>
2626
<tr>
2727
<td><b>{tmpl_var name='hfs_name'}</b></td>
2828
<td class="text-right">
29-
<a class="btn btn-default formbutton-danger formbutton-narrow" href="javascript: ISPConfig.confirm_action('help/faq_sections_delete.php?id={tmpl_var name='id'}&phpsessid={tmpl_var name='phpsessid'}','{tmpl_var name='delete_confirmation'}');"><span class="icon icon-delete"></span></a>
29+
<a class="btn btn-default formbutton-danger formbutton-narrow" href="javascript: ISPConfig.confirm_action('help/faq_sections_delete.php?id={tmpl_var name='id'}&_csrf_id={tmpl_var name='csrf_id'}&_csrf_key={tmpl_var name='csrf_key'}&phpsessid={tmpl_var name='phpsessid'}','{tmpl_var name='delete_confirmation'}');"><span class="icon icon-delete"></span></a>
3030
</td>
3131
<td class="text-right">
3232
<a class="btn btn-default formbutton-default formbutton-narrow" data-load-content="help/faq_sections_edit.php?id={tmpl_var name='id'}"><span class="icon icon-edit"></span></a>

0 commit comments

Comments
 (0)