ZwiiCMS-Team/ZwiiCMS
ZwiiCMS-Team/ZwiiCMS
10
9
Fork 3
Code Releases 157 Activity

csrf user

Browse Source
This commit is contained in:
Fred Tempez 2023-06-20 20:24:15 +02:00
parent 43b084369e
commit 8397e5eb0c
1 changed files with 7 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
core/module/user/user.php
View File

@ -157,11 +157,13 @@ class user extends common
]);
}
// Jeton incorrect
elseif ($this->getUrl(3) !== $_SESSION['csrf']) {
elseif (
$this->checkCSRF()
) {
// Valeurs en sortie
$this->addOutput([
'redirect' => helper::baseUrl() . 'user',
'notification' => helper::translate('Action interdite')
'notification' => helper::translate('Jeton incorrect')
]);
}
// Bloque la suppression de son propre compte
@ -190,7 +192,7 @@ class user extends common
public function edit()
{
if (
$this->getUrl(3) !== $_SESSION['csrf']
$this->checkCSRF()
) {
// Valeurs en sortie