iarv/Piwigo
1
0
Fork 0
mirror of https://github.com/Piwigo/Piwigo.git synced 2026-03-28 17:42:57 +01:00
Code Issues Packages Projects Releases Wiki Activity

fixes GHSA-qg85-957m-7vgg providing plugin_id in URL is useless since Piwigo 12

Browse Source
This commit is contained in:
plegall
2023-10-06 15:13:04 +02:00
parent 09890487cd
commit cc99c0f1e9
1 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
admin/plugins_new.php
View File

@@ -47,11 +47,11 @@ if (isset($_GET['installstatus']))
switch ($_GET['installstatus'])
{
case 'ok':
$activate_url = get_root_url().'admin.php?page=plugins'
. '&plugin=' . $_GET['plugin_id']
. '&pwg_token=' . get_pwg_token()
. '&action=activate'
. '&filter=deactivated';
// since Piwigo 12, you need to be on the page of installed plugins to active a plugin with
// a JS action, no need to provide plugin_id in URL, just link to the page of installed
// plugins, filtered on deactivated plugins. The webmaster will have to find its newly
// installed plugin and click on the activation switch.
$activate_url = get_root_url().'admin.php?page=plugins&filter=deactivated';
$page['infos'][] = l10n('Plugin has been successfully copied');
$page['infos'][] = '<a href="'. $activate_url . '">' . l10n('Activate it now') . '</a>';