fix(admin): verify CSRF token in Plus/Gold admin Mods [#139] (#253)

2026-09-04 09:27:17 +00:00 · 2026-06-22 17:40:43 +02:00
parent 9d2d7699a9
commit 6e79c47951
10 changed files with 31 additions and 0 deletions
@@ -66,6 +66,7 @@ if($id){
    </div>

    <form action="../GameEngine/Admin/Mods/editPlus.php" method="POST">
+        <?php echo csrf_field(); ?>
        <input type="hidden" name="admid" value="<?php echo $_SESSION['id'];?>">
        <input type="hidden" name="uid" value="<?php echo $uid;?>">
        <input type="hidden" name="id" value="<?php echo $id;?>">