adam/Piwigo
1
0
Fork 0
mirror of https://github.com/Piwigo/Piwigo.git synced 2026-08-07 09:13:02 +02:00
Code Issues Packages Projects Releases Wiki Activity

fixes #2519 prevent CSRF on album notification form

Browse Source
This commit is contained in:
plegall
2026-02-04 15:49:43 +01:00
parent 186378e4f3
commit 74edc39995
2 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
admin/album_notification.php
+1
View File
@@ -33,6 +33,7 @@ $page['cat'] = $category['id'];
// info by email to an access granted group of category informations // info by email to an access granted group of category informations
if (isset($_POST['submitEmail'])) if (isset($_POST['submitEmail']))
{ {
check_pwg_token();
set_make_full_url(); set_make_full_url();
$img = array(); $img = array();
admin/themes/default/template/album_notification.tpl
+1
View File
@@ -61,6 +61,7 @@ span.errors {
{/html_style} {/html_style}
<form action="{$F_ACTION}" method="post" id="categoryNotify"> <form action="{$F_ACTION}" method="post" id="categoryNotify">
<input type="hidden" name="pwg_token" value="{$PWG_TOKEN}">
<fieldset id="emailCatInfo"> <fieldset id="emailCatInfo">
<legend><span class="icon-mail-1 icon-green"></span>{'Send mail to users'|@translate}</legend> <legend><span class="icon-mail-1 icon-green"></span>{'Send mail to users'|@translate}</legend>