Put csrf token into Admin_View and Theme_View by default, then use it

directly wherever possible instead of access::csrf_token().
This commit is contained in:
Bharat Mediratta
2009-03-27 03:43:21 +00:00
parent d7719a7e72
commit 921f3a2eee
19 changed files with 27 additions and 28 deletions
+1 -1
View File
@@ -2,7 +2,7 @@
<div block_id="<?= $id ?>" id="<?= $css_id ?>" class="gBlock ui-widget">
<div class="ui-dialog-titlebar ui-widget-header ui-helper-clearfix ui-icon-right">
<? if ($css_id != "gBlockAdder"): ?>
<a href="<?= url::site("admin/dashboard/remove_block/$id?csrf=" . access::csrf_token()) ?>"
<a href="<?= url::site("admin/dashboard/remove_block/$id?csrf=$csrf") ?>"
class="ui-dialog-titlebar-close ui-corner-all">
<span class="ui-icon ui-icon-closethick">remove</span>
</a>