WebMods: Following the last commit, this adds the CSRF check token

to existing action="post" forms. Right now, we don't have much of a
real protection against CSRF yet, but psychon is working on making
that happen :)


git-svn-id: https://znc.svn.sourceforge.net/svnroot/znc/trunk@1933 726aef4b-f618-498e-8847-2d620e286838
This commit is contained in:
cflakes
2010-04-25 13:35:06 +00:00
parent b0d140e2ed
commit 298d7f0997
7 changed files with 7 additions and 0 deletions
+1
View File
@@ -307,6 +307,7 @@ void CWebSock::SetVars() {
m_Template["SessionIP"] = GetRemoteIP();
m_Template["Tag"] = CZNC::GetTag(GetSession()->GetUser() != NULL);
m_Template["SkinName"] = GetSkinName();
m_Template["_CSRF_Check"] = GetCSRFCheck();
if (GetSession()->IsAdmin()) {
m_Template["IsAdmin"] = "true";