TravianZ

mirror of https://github.com/Shadowss/TravianZ.git synced 2026-06-28 00:24:23 +00:00

Files

T

Ferywir 8a3a67d175 fix(admin): verify CSRF token in alliance/medal admin Mods [#139 ] (#261 )

editAli, delAli, medals, delallymedal, delallymedalbyaid, delallymedalbyweek
and deletemedalbyweek are POSTed to directly, bypassing admin.php's central
csrf_verify(). Add csrf_verify() (after the admin access check, via the shared
GameEngine/Admin/csrf.php) and csrf_field() in their forms (playermedals.tpl,
editAli.tpl, delAli.tpl, delmedal.tpl, allymedals.tpl, delallymedal.tpl).

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-23 11:11:32 +03:00

Mods

fix(admin): verify CSRF token in alliance/medal admin Mods [#139 ] (#261 )

2026-06-23 11:11:32 +03:00

.htaccess

GameEngine and install folders have 777 already set by default

2016-07-02 21:39:28 +02:00

admin.php

Change some text on license TravianZ

2025-02-11 11:22:22 +02:00

ajax.js

GameEngine and install folders have 777 already set by default