fix(admin): verify CSRF token in maintenance admin Mods [#139] (#269)

2026-08-14 07:11:02 +00:00 · 2026-06-23 16:01:20 +02:00
parent 886f421f50
commit e17bb3dec6
15 changed files with 56 additions and 0 deletions
@@ -78,6 +78,7 @@ if(isset($_GET['uid']) && (int)$_GET['uid'] > 0) {
    </div>

    <form action="../GameEngine/Admin/Mods/delUser.php" method="post" onsubmit="return confirm('ESTI SIGUR? Se va sterge tot: sate, trupe, rapoarte!')">
+        <?php echo csrf_field(); ?>
        <input type="hidden" name="uid" value="<?php echo $target['id']; ?>">
        <input type="hidden" name="admid" value="<?php echo $_SESSION['id']; ?>">