adam/Piwigo
1
0
Fork 0
mirror of https://github.com/Piwigo/Piwigo.git synced 2026-06-02 04:15:05 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add token to themes installation.

Browse Source 
Only webmasters can install new plugins, themes or languages.

git-svn-id: http://piwigo.org/svn/trunk@5406 68402e56-0260-453c-a942-63ccdbb3a9ee
This commit is contained in:
patdenice
2010-03-27 17:32:45 +00:00
parent 0b38088a7e
commit 66d2cd6ec2
6 changed files with 70 additions and 37 deletions
Download Patch File Download Diff File Expand all files Collapse all files
admin/themes_new.php
+18 -8
View File
@@ -53,15 +53,24 @@ if (!is_writable($themes_dir))
// | perform installation |
// +-----------------------------------------------------------------------+
if (isset($_GET['revision']) and isset($_GET['extension']) and !is_adviser())
if (isset($_GET['revision']) and isset($_GET['extension']))
{
$install_status = $themes->extract_theme_files(
'install',
$_GET['revision'],
$_GET['extension']
);
redirect($base_url.'&installstatus='.$install_status);
if (!is_webmaster())
{
array_push($page['errors'], l10n('Webmaster status is required.'));
}
else
{
check_pwg_token();
$install_status = $themes->extract_theme_files(
'install',
$_GET['revision'],
$_GET['extension']
);
redirect($base_url.'&installstatus='.$install_status);
}
}
// +-----------------------------------------------------------------------+
@@ -112,6 +121,7 @@ if ($themes->get_server_themes(true)) // only new themes
$url_auto_install = htmlentities($base_url)
. '&revision=' . $theme['revision_id']
. '&extension=' . $theme['extension_id']
. '&pwg_token='.get_pwg_token()
;
$template->append(