fix(admin): verify CSRF token in player-management admin Mods [#139] (#256)

2026-09-17 23:57:18 +00:00 · 2026-06-23 05:54:03 +02:00
parent 6888a09b5f
commit e49069a9c6
17 changed files with 55 additions and 0 deletions
@@ -69,6 +69,7 @@ function clearSitter(n){ document.getElementById('sit'+n).value = '0'; }
    </div>

    <form action="../GameEngine/Admin/Mods/editSitter.php" method="POST">
+        <?php echo csrf_field(); ?>
        <input type="hidden" name="admid" value="<?php echo $_SESSION['id']; ?>">
        <input type="hidden" name="uid" value="<?php echo $uid; ?>">
        <input type="hidden" name="id" value="<?php echo $id; ?>">