forked from ZwiiCMS-Team/ZwiiCMS
correctif faille CSRF
This commit is contained in:
parent
995278c753
commit
b56696d651
@ -95,7 +95,8 @@ class page extends common {
|
|||||||
]);
|
]);
|
||||||
}
|
}
|
||||||
// Jeton incorrect
|
// Jeton incorrect
|
||||||
elseif($_GET['csrf'] !== $_SESSION['csrf']) {
|
elseif(!isset ($_GET['csrf']) AND
|
||||||
|
$_GET['csrf'] !== $_SESSION['csrf']) {
|
||||||
// Valeurs en sortie
|
// Valeurs en sortie
|
||||||
$this->addOutput([
|
$this->addOutput([
|
||||||
'redirect' => helper::baseUrl() . 'page/edit/' . $url[0],
|
'redirect' => helper::baseUrl() . 'page/edit/' . $url[0],
|
||||||
|
Loading…
Reference in New Issue
Block a user