mirror of
https://github.com/znc/znc.git
synced 2026-05-07 22:04:46 +02:00
WebMods: Following the last commit, this adds the CSRF check token
to existing action="post" forms. Right now, we don't have much of a real protection against CSRF yet, but psychon is working on making that happen :) git-svn-id: https://znc.svn.sourceforge.net/svnroot/znc/trunk@1933 726aef4b-f618-498e-8847-2d620e286838
This commit is contained in:
@@ -307,6 +307,7 @@ void CWebSock::SetVars() {
|
||||
m_Template["SessionIP"] = GetRemoteIP();
|
||||
m_Template["Tag"] = CZNC::GetTag(GetSession()->GetUser() != NULL);
|
||||
m_Template["SkinName"] = GetSkinName();
|
||||
m_Template["_CSRF_Check"] = GetCSRFCheck();
|
||||
|
||||
if (GetSession()->IsAdmin()) {
|
||||
m_Template["IsAdmin"] = "true";
|
||||
|
||||
Reference in New Issue
Block a user