From 6b6ce95a5896bb9e2a85f0f23925c08315190177 Mon Sep 17 00:00:00 2001 From: MatthieuLP Date: Mon, 27 Mar 2023 15:18:20 +0200 Subject: [PATCH] related to ##1887 added security verifications for the delete action --- admin/albums.php | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/admin/albums.php b/admin/albums.php index 30b0336cf..8c6bd0dc1 100644 --- a/admin/albums.php +++ b/admin/albums.php @@ -25,6 +25,11 @@ list($albums_counter) = pwg_db_fetch_row(pwg_query($query)); // +-----------------------------------------------------------------------+ check_status(ACCESS_ADMINISTRATOR); +if (!empty($_POST) or isset($_GET['delete'])) +{ + check_pwg_token(); +} + // +-----------------------------------------------------------------------+ // | tabs | // +-----------------------------------------------------------------------+