Webmods: Only accept POST requests with a secret parameter

This is a first step against CSRF. Thanks to flakes for the idea.


git-svn-id: https://znc.svn.sourceforge.net/svnroot/znc/trunk@1932 726aef4b-f618-498e-8847-2d620e286838
This commit is contained in:
psychon
2010-04-25 13:04:51 +00:00
parent eaaddf01bb
commit b0d140e2ed
4 changed files with 21 additions and 0 deletions

View File

@@ -147,6 +147,7 @@ public:
void PrintErrorPage(const CString& sMessage);
CSmartPtr<CWebSession> GetSession();
CString GetCSRFCheck();
virtual Csock* GetSockObj(const CString& sHost, unsigned short uPort);
CString GetModWebPath(const CString& sModName) const;