fix(admin): verify CSRF token in maintenance admin Mods [#139] (#269)

2026-08-17 00:31:02 +00:00 · 2026-06-23 16:01:20 +02:00
parent 886f421f50
commit e17bb3dec6
15 changed files with 56 additions and 0 deletions
@@ -30,6 +30,7 @@
 </style>

 <form action="../GameEngine/Admin/Mods/mainteneceCleanBanData.php" method="POST" onsubmit="return confirm('TRUNCATE banlist? This cannot be undone!')">
+<?php echo csrf_field(); ?>
 <input type="hidden" name="admid" value="<?=$_SESSION['id']?>">
 <div class="clean-card">
  <div class="clean-head">Clear – Banlist - Data</div>