stian/gallery3
1
0
Fork 0
mirror of https://github.com/Pathduck/gallery3.git synced 2026-05-20 03:19:13 -04:00
Code Issues Actions Packages Projects Releases Wiki Activity

Put csrf token into Admin_View and Theme_View by default, then use it

Browse Source 
directly wherever possible instead of access::csrf_token().
This commit is contained in:
Bharat Mediratta
2009-03-27 03:43:21 +00:00
parent d7719a7e72
commit 921f3a2eee
19 changed files with 27 additions and 28 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
modules/comment/views/admin_comments.html.php
View File

@@ -1,7 +1,7 @@
<?php defined("SYSPATH") or die("No direct script access.") ?>
<script type="text/javascript">
var set_state_url =
"<?= url::site("admin/comments/set_state/__ID__/__STATE__?csrf=" . access::csrf_token()) ?>";
"<?= url::site("admin/comments/set_state/__ID__/__STATE__?csrf=$csrf") ?>";
function set_state(state, id) {
$.get(set_state_url.replace("__STATE__", state).replace("__ID__", id),
{},
@@ -12,7 +12,7 @@
}
var delete_url =
"<?= url::site("admin/comments/delete/__ID__?csrf=" . access::csrf_token()) ?>";
"<?= url::site("admin/comments/delete/__ID__?csrf=$csrf") ?>";
function del(id) {
$.get(delete_url.replace("__ID__", id),
@@ -63,7 +63,7 @@
$spam->count()) ?>
</p>
<p>
<a href="<?= url::site("admin/comments/delete_all_spam?csrf=" . access::csrf_token()) ?>">
<a href="<?= url::site("admin/comments/delete_all_spam?csrf=$csrf") ?>">
<?= t("Delete all spam") ?>
</a>
<? else: ?>