fix(admin): verify CSRF token in server-settings admin Mods [#139] (#268)

2026-07-12 07:36:07 +00:00 · 2026-06-23 15:12:54 +02:00
parent c98bcf266b
commit 886f421f50
20 changed files with 73 additions and 0 deletions
@@ -59,6 +59,7 @@ if($_SESSION['access'] < 9) die(ACCESS_DENIED_ADMIN);
    <div class="config-title"><?php echo PLUS_CONFIGURATION ?></div>
    
    <form action="../GameEngine/Admin/Mods/editPlusSet.php" method="POST">
+        <?php echo csrf_field(); ?>
        <input type="hidden" name="id" id="id" value="<?php echo $_SESSION['id']; ?>">
        
        <div class="config-card">