mirror of
https://github.com/Pathduck/gallery3.git
synced 2026-05-19 19:09:13 -04:00
9cf2c57921
place for it, but it'll do for now. Do CSRF checking in the Admin controller so that we're safe across the board on the admin side.
60 lines
1.9 KiB
PHP
60 lines
1.9 KiB
PHP
<?php defined("SYSPATH") or die("No direct script access.");
|
|
/**
|
|
* Gallery - a web based photo album viewer and editor
|
|
* Copyright (C) 2000-2008 Bharat Mediratta
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or (at
|
|
* your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful, but
|
|
* WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
* General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin Street - Fifth Floor, Boston, MA 02110-1301, USA.
|
|
*/
|
|
|
|
class Forge extends Forge_Core {
|
|
/**
|
|
* Force a CSRF element into every form.
|
|
*/
|
|
public function __construct($action=null, $title='', $method=null, $attr=array()) {
|
|
parent::__construct($action, $title, $method, $attr);
|
|
$this->input("csrf")->type("hidden")->value("");
|
|
}
|
|
|
|
/**
|
|
* Use our own template
|
|
*/
|
|
public function render($template="form.html", $custom=false) {
|
|
$this->inputs["csrf"]->value(access::csrf_token());
|
|
return parent::render($template, $custom);
|
|
}
|
|
|
|
/**
|
|
* Associate validation rules defined in the model with this form.
|
|
*/
|
|
public function add_rules_from($model) {
|
|
foreach ($this->inputs as $name => $input) {
|
|
if (isset($input->inputs)) {
|
|
$input->add_rules_from($model);
|
|
}
|
|
if (isset($model->rules[$name])) {
|
|
$input->rules($model->rules[$name]);
|
|
}
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Validate our CSRF value as a mandatory part of all form validation.
|
|
*/
|
|
public function validate() {
|
|
$status = parent::validate();
|
|
access::verify_csrf();
|
|
return $status;
|
|
}
|
|
} |