Correction faille CSRF
This commit is contained in:
parent
b56696d651
commit
30e06ef2e2
@ -95,8 +95,14 @@ class page extends common {
|
|||||||
]);
|
]);
|
||||||
}
|
}
|
||||||
// Jeton incorrect
|
// Jeton incorrect
|
||||||
elseif(!isset ($_GET['csrf']) AND
|
elseif(!isset($_GET['csrf'])) {
|
||||||
$_GET['csrf'] !== $_SESSION['csrf']) {
|
// Valeurs en sortie
|
||||||
|
$this->addOutput([
|
||||||
|
'redirect' => helper::baseUrl() . 'page/edit/' . $url[0],
|
||||||
|
'notification' => 'Jeton invalide'
|
||||||
|
]);
|
||||||
|
}
|
||||||
|
elseif ($_GET['csrf'] !== $_SESSION['csrf']) {
|
||||||
// Valeurs en sortie
|
// Valeurs en sortie
|
||||||
$this->addOutput([
|
$this->addOutput([
|
||||||
'redirect' => helper::baseUrl() . 'page/edit/' . $url[0],
|
'redirect' => helper::baseUrl() . 'page/edit/' . $url[0],
|
||||||
|
Loading…
Reference in New Issue
Block a user