mirror of
https://github.com/Piwigo/Piwigo.git
synced 2026-07-18 23:53:39 +02:00
bug 1328: backport the pwg_token on trunk
bug 1329: backport the check_input_parameter on trunk feature 1026: add pwg_token feature for edit/delete comment. Heavy refactoring on this feature to make the code simpler and easier to maintain (I hope). git-svn-id: http://piwigo.org/svn/trunk@5195 68402e56-0260-453c-a942-63ccdbb3a9ee
This commit is contained in:
@@ -38,6 +38,8 @@ $plugins = new plugins();
|
||||
//------------------------------------------------------automatic installation
|
||||
if (isset($_GET['revision']) and isset($_GET['extension']) and !is_adviser())
|
||||
{
|
||||
check_pwg_token();
|
||||
|
||||
$install_status = $plugins->extract_plugin_files('install', $_GET['revision'], $_GET['extension']);
|
||||
|
||||
redirect($base_url.'&installstatus='.$install_status);
|
||||
@@ -110,7 +112,9 @@ if ($plugins->get_server_plugins(true))
|
||||
|
||||
$url_auto_install = htmlentities($base_url)
|
||||
. '&revision=' . $plugin['revision_id']
|
||||
. '&extension=' . $plugin['extension_id'];
|
||||
. '&extension=' . $plugin['extension_id']
|
||||
. '&pwg_token='.get_pwg_token()
|
||||
;
|
||||
|
||||
$template->append('plugins', array(
|
||||
'EXT_NAME' => $plugin['extension_name'],
|
||||
|
||||
Reference in New Issue
Block a user