Skip to content

Commit 69a57d9

Browse files
author
Till Brehm
committed
Added csrf protection to dns wizard.
1 parent 99e9ac7 commit 69a57d9

File tree

1 file changed

+9
-1
lines changed

1 file changed

+9
-1
lines changed

interface/web/dns/dns_wizard.php

Lines changed: 9 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -129,7 +129,10 @@
129129
}
130130

131131
if($_POST['create'] == 1) {
132-
132+
133+
//* CSRF Check
134+
$app->auth->csrf_token_check();
135+
133136
$error = '';
134137

135138
// apply filters
@@ -287,6 +290,11 @@
287290

288291
$app->tpl->setVar("title", 'DNS Wizard');
289292

293+
//* SET csrf token
294+
$csrf_token = $app->auth->csrf_token_get('dns_wizard');
295+
$app->tpl->setVar('_csrf_id',$csrf_token['csrf_id']);
296+
$app->tpl->setVar('_csrf_key',$csrf_token['csrf_key']);
297+
290298
$lng_file = 'lib/lang/'.$_SESSION['s']['language'].'_dns_wizard.lng';
291299
include $lng_file;
292300
$app->tpl->setVar($wb);

0 commit comments

Comments
 (0)