forked from ZwiiCMS-Team/ZwiiCMS
Csrf Theme reset
This commit is contained in:
parent
adf0ac8f80
commit
f262b661e9
@ -811,16 +811,9 @@ class theme extends common
|
||||
*/
|
||||
public function reset()
|
||||
{
|
||||
// $url prend l'adresse sans le token
|
||||
$url = explode('&', $this->getUrl(2));
|
||||
|
||||
if (
|
||||
isset($_GET['csrf'])
|
||||
and $_GET['csrf'] === $_SESSION['csrf']
|
||||
) {
|
||||
// Réinitialisation
|
||||
$redirect = '';
|
||||
switch ($url[0]) {
|
||||
switch ($this->getUrl(2)) {
|
||||
case 'admin':
|
||||
$this->initData('admin', self::$i18nUI);
|
||||
$redirect = helper::baseUrl() . 'theme/admin';
|
||||
@ -843,12 +836,7 @@ class theme extends common
|
||||
'redirect' => $redirect,
|
||||
'state' => true
|
||||
]);
|
||||
} else {
|
||||
// Valeurs en sortie
|
||||
$this->addOutput([
|
||||
'notification' => helper::translate('Jeton incorrect')
|
||||
]);
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
|
||||
|
Loading…
x
Reference in New Issue
Block a user