forked from ZwiiCMS-Team/ZwiiCMS
correctif faille CSRF
This commit is contained in:
parent
995278c753
commit
b56696d651
@ -95,7 +95,8 @@ class page extends common {
|
||||
]);
|
||||
}
|
||||
// Jeton incorrect
|
||||
elseif($_GET['csrf'] !== $_SESSION['csrf']) {
|
||||
elseif(!isset ($_GET['csrf']) AND
|
||||
$_GET['csrf'] !== $_SESSION['csrf']) {
|
||||
// Valeurs en sortie
|
||||
$this->addOutput([
|
||||
'redirect' => helper::baseUrl() . 'page/edit/' . $url[0],
|
||||
|
Loading…
Reference in New Issue
Block a user