xinyin025/TravianZ
1
0
Fork 0
mirror of https://github.com/Shadowss/TravianZ.git synced 2026-06-28 00:24:23 +00:00
Code Issues Packages Projects Releases Wiki Activity
3,266 Commits 20 Branches 6 Tags
master
Commit Graph

3 Commits

Author SHA1 Message Date
novgorodschi catalin 0991c5c906 File sysmsg remove 
File sysmsg remove, no need anymore is moved into admin panel
 2026-06-26 07:43:24 +03:00
Ferywir 6472b30bd2 fix(admin): verify CSRF token in message admin Mods [#139] (#264) 
sendMessage, massmessage and sysmessage are POSTed to directly, bypassing
admin.php's central csrf_verify(). Add csrf_verify() (after the admin access
check, via the shared GameEngine/Admin/csrf.php) and csrf_field() in their
forms (Newmessage.tpl, massmessage.tpl, sysmessage.tpl; the mass/sys templates
have both a prepare and an execute form).

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-23 11:49:32 +03:00
novgorodschi catalin 547e164143 Edit some access for MH user and recreate mass messaage 
Edit some access for MH user and recreate mass message and new maintenance system view for admins
 2026-06-02 10:59:35 +03:00