iarv/Piwigo
1
0
Fork 0
mirror of https://github.com/Piwigo/Piwigo.git synced 2026-03-28 17:42:57 +01:00
Code Issues Packages Projects Releases Wiki Activity

fixes #2519 prevent CSRF on album notification form

Browse Source
This commit is contained in:
plegall
2026-02-04 15:49:43 +01:00
parent 186378e4f3
commit 74edc39995
2 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
admin/album_notification.php
View File

@@ -33,6 +33,7 @@ $page['cat'] = $category['id'];
// info by email to an access granted group of category informations
if (isset($_POST['submitEmail']))
{
check_pwg_token();
set_make_full_url();
$img = array();

1
admin/themes/default/template/album_notification.tpl
View File

@@ -61,6 +61,7 @@ span.errors {
{/html_style}
<form action="{$F_ACTION}" method="post" id="categoryNotify">
<input type="hidden" name="pwg_token" value="{$PWG_TOKEN}">
<fieldset id="emailCatInfo">
<legend><span class="icon-mail-1 icon-green"></span>{'Send mail to users'|@translate}</legend>