Changeset 1558

Timestamp:

03/17/08 20:04:44 (2 months ago)

Author:

Neal

Message:

Somehow this was not included in the previous commit.

Files:

• branches/punbb-1.3-dev/upload/profile.php (modified) (2 diffs)

branches/punbb-1.3-dev/upload/profile.php

@@ -690 +690 @@
-                ($pun_user['g_moderator'] != '1' || $pun_user['g_mod_edit_users'] == '0' || $user['g_id'] == PUN_ADMIN || $user['g_moderator'] == '1'))
-                message($lang_common['No permission']);
+
+        // We validate the CSRF token. If it's set in POST and we're at this point, the token is valid.
+        // If it's in GET, we need to make sure it's valid.
+        if (!isset($_POST['csrf_token']) && (!isset($_GET['csrf_token']) || $_GET['csrf_token'] !== generate_form_token('delete_avatar'.$pun_user['id'])))
+                csrf_confirm_form();
-
-        ($hook = get_hook('pf_delete_avatar_selected')) ? eval($hook) : null;
@@ -2141 +2146 @@
-                                <?php echo implode("\n\t\t\t\t", $pun_page['hidden_fields'])."\n" ?>
-                        </div>
-$id
+array($id, generate_form_token('delete_avatar'.$pun_user['id']))
-<?php endif; ?>                 <fieldset class="frm-set set<?php echo ++$pun_page['set_count'] ?>">
-                                <legend class="frm-legend"><strong><?php echo $lang_profile['Avatar'] ?></strong></legend>