stian/gallery3
1
0
Fork 0
mirror of https://github.com/Pathduck/gallery3.git synced 2026-05-19 19:09:13 -04:00
Code Issues Actions Packages Projects Releases Wiki Activity

Put csrf token into Admin_View and Theme_View by default, then use it

Browse Source 
directly wherever possible instead of access::csrf_token().
This commit is contained in:
Bharat Mediratta
2009-03-27 03:43:21 +00:00
parent d7719a7e72
commit 921f3a2eee
19 changed files with 27 additions and 28 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
modules/user/views/admin_users.html.php
View File

@@ -1,6 +1,6 @@
<?php defined("SYSPATH") or die("No direct script access.") ?>
<script type="text/javascript">
var add_user_to_group_url = "<?= url::site("admin/users/add_user_to_group/__USERID__/__GROUPID__?csrf=" . access::csrf_token()) ?>";
var add_user_to_group_url = "<?= url::site("admin/users/add_user_to_group/__USERID__/__GROUPID__?csrf=$csrf") ?>";
$(document).ready(function(){
$("#gUserAdminList .core-info").draggable({
helper: "clone"
@@ -32,7 +32,7 @@
}
var remove_user = function(user_id, group_id) {
var remove_user_url = "<?= url::site("admin/users/remove_user_from_group/__USERID__/__GROUPID__?csrf=" . access::csrf_token()) ?>";
var remove_user_url = "<?= url::site("admin/users/remove_user_from_group/__USERID__/__GROUPID__?csrf=$csrf") ?>";
$.get(remove_user_url.replace("__USERID__", user_id).replace("__GROUPID__", group_id),
{},
function() {