Commit Graph

10 Commits

Author SHA1 Message Date
Ferywir c0bbf2bfbe fix(admin): escape stored player values in admin templates [#139] (#272) 2026-06-23 22:00:51 +03:00
Ferywir 749a55aaf5 fix(admin): escape reflected request params in admin templates [#139] (#270) 2026-06-23 17:37:11 +03:00
Ferywir ca991408c1 fix(admin): verify CSRF token in village admin Mods [#139] (#259)
editVillageOwner, renameVillage, editBuildings and editResources are POSTed
to directly, bypassing admin.php's central csrf_verify(). Add csrf_verify()
(after the admin access check, via the shared GameEngine/Admin/csrf.php) and
csrf_field() in their forms (editVillage.tpl, village.tpl, editResources.tpl).

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-23 10:31:08 +03:00
novgorodschi catalin e69d8457d8 Admin panel design changed
Admin panel design changed
2026-06-05 12:30:13 +03:00
novgorodschi catalin b31a0a3f92 Fix edit resources
Fix edit resources
2026-05-27 13:09:24 +03:00
novgorodschi catalin a4e2c506a8 Redesign Admin Panel
Full frontend & backend redesign and refactor
2026-05-25 10:23:39 +03:00
Catalin Novgorodschi 59c1114b1c Change some text on license TravianZ 2025-02-11 11:22:22 +02:00
Martin Ambrus e519826621 feat: Admin page titles update to reflect subpages 2017-10-20 17:29:34 +02:00
Shadow 19767cf6a6 update admin panel 2014-03-04 12:44:25 +02:00
yi12345 98e94af807 finish hero_full.php 2013-06-16 10:38:34 +03:00