fix(admin): wire CSRF token into admin.php-routed forms [#139] (#244)

2026-08-29 14:47:14 +00:00 · 2026-06-20 05:44:12 +02:00
parent 1ce1003153
commit b7e943ea90
11 changed files with 79 additions and 43 deletions
@@ -130,6 +130,7 @@ body{margin:0;background:#f1f5f9;font-family:system-ui,-apple-system,Segoe UI,Ro
  </div>

  <form id="show" action="admin.php?p=map" method="POST" class="map-filters">
+    <?php echo csrf_field(); ?>
    <div class="filter-group">
      <input id="show1" name="show1" type="checkbox" <?php echo $check1;?> value="1">
      <label for="show1">Players</label>