Commit Graph

10 Commits

Author SHA1 Message Date
Ferywir 8a3a67d175 fix(admin): verify CSRF token in alliance/medal admin Mods [#139] (#261)
editAli, delAli, medals, delallymedal, delallymedalbyaid, delallymedalbyweek
and deletemedalbyweek are POSTed to directly, bypassing admin.php's central
csrf_verify(). Add csrf_verify() (after the admin access check, via the shared
GameEngine/Admin/csrf.php) and csrf_field() in their forms (playermedals.tpl,
editAli.tpl, delAli.tpl, delmedal.tpl, allymedals.tpl, delallymedal.tpl).

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-23 11:11:32 +03:00
novgorodschi catalin a4e2c506a8 Redesign Admin Panel
Full frontend & backend redesign and refactor
2026-05-25 10:23:39 +03:00
Catalin Novgorodschi 59c1114b1c Change some text on license TravianZ 2025-02-11 11:22:22 +02:00
Martin Ambrus a822504706 fix: counting queries optimization
Closes #300
2017-11-04 15:41:35 +01:00
Martin Ambrus 331885a110 fix: remove SQL injections in Admin 2017-10-19 21:17:11 +02:00
Martin Ambrus 92b9a7b043 fix: a lot of MySQL calls in templates replaced by MySQLi ones 2017-08-28 23:56:59 +02:00
Novgorodschi Catalin b29b0d90d0 Update admin panel to view images 2013-08-13 09:59:42 +03:00
Neranjen 786cbf1f8e Big Cleanup
1) Removed unnecessary files
2) Trailling spaces (no all though)
3)  Some space to tab conversion
2012-06-18 05:06:05 +05:30
unknown 2d87749f95 update install and email activation + add friends inviting system 2012-05-22 20:52:56 +03:00
unknown e0ac5075fa fix ww rank: now the ww dissapear from rank when he destroyed + reworked admin panel by allycol93 with some changes by me 2012-05-10 17:19:33 +03:00