fix(admin): verify CSRF token in player-management admin Mods [#139] (#256)

2026-09-19 16:47:25 +00:00 · 2026-06-23 05:54:03 +02:00
parent 6888a09b5f
commit e49069a9c6
17 changed files with 55 additions and 0 deletions
@@ -103,6 +103,7 @@ elseif(isset($_GET['g']) && $_GET['g']=='OK'){
    </div>

    <form action="../GameEngine/Admin/Mods/addUsers.php" method="POST" class="add-form">
+      <?php echo csrf_field(); ?>
      <input type="hidden" name="id" value="<?php echo $id;?>">

      <?php if($errorMsg){?><div class="alert alert-err">✗ <?php echo $errorMsg;?></div><?php }?>