Ferywir ca991408c1 fix(admin): verify CSRF token in village admin Mods [#139] (#259) ...

editVillageOwner, renameVillage, editBuildings and editResources are POSTed
to directly, bypassing admin.php's central csrf_verify(). Add csrf_verify()
(after the admin access check, via the shared GameEngine/Admin/csrf.php) and
csrf_field() in their forms (editVillage.tpl, village.tpl, editResources.tpl).

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-23 10:31:08 +03:00

..

Message

Redesign Admin Panel

2026-05-25 10:23:39 +03:00

Notice

Change some text on license TravianZ

2025-02-11 11:22:22 +02:00

report

chore: HTML fixes from Eclipse

2017-08-28 17:31:55 +02:00

404.tpl

Change some text on license TravianZ

2025-02-11 11:22:22 +02:00

add_village.tpl

fix(admin): wire CSRF token into admin.php-routed forms [#139] (#244)

2026-06-20 06:44:12 +03:00

addABTroops.tpl

fix(admin): verify CSRF token in troop admin Mods [#139] (#258)

2026-06-23 08:43:18 +03:00

addTroops.tpl

fix(admin): verify CSRF token in troop admin Mods [#139] (#258)

2026-06-23 08:43:18 +03:00

addUsers.tpl

fix(admin): verify CSRF token in player-management admin Mods [#139] (#256)

2026-06-23 06:54:03 +03:00

admin_log.tpl

Fix Admin Panel view & some PHP 8.1+

2026-06-22 09:20:16 +03:00

alliance.tpl

Fix alliance capacity

2026-06-04 15:14:35 +03:00

allymedals.tpl

Admin panel design changed

2026-06-05 12:30:13 +03:00

artifact.tpl

Fix some bugs + added (coded delAli)

2026-05-25 12:37:33 +03:00

ban_msg.tpl

Redesign Admin Panel

2026-05-25 10:23:39 +03:00

ban.tpl

Fix ban view

2026-06-23 10:30:16 +03:00

cleanban.tpl

Fix admin panel colour log

2026-06-05 12:51:34 +03:00

config.tpl

Change some file

2026-06-04 13:39:59 +03:00

debug_log.tpl

Fix some things

2026-06-22 15:19:05 +03:00

delAli.tpl

Fix some bugs + added (coded delAli)

2026-05-25 12:37:33 +03:00

delallymedal.tpl

Redesign Admin Panel

2026-05-25 10:23:39 +03:00

deletion.tpl

Fix deletion user

2026-06-09 08:04:17 +03:00

delmedal.tpl

Redesign Admin Panel

2026-05-25 10:23:39 +03:00

editAccess.tpl

fix(admin): verify CSRF token in player-management admin Mods [#139] (#256)

2026-06-23 06:54:03 +03:00

editAdditional.tpl

fix(admin): verify CSRF token in player-management admin Mods [#139] (#256)

2026-06-23 06:54:03 +03:00

editAdminInfo.tpl

Redesign Admin Panel

2026-05-25 10:23:39 +03:00

editAli.tpl

Redesign Admin Panel

2026-05-25 10:23:39 +03:00

editExtraSet.tpl

Redesign Admin Panel

2026-05-25 10:23:39 +03:00

editHero.tpl

fix(admin): verify CSRF token in player-management admin Mods [#139] (#256)

2026-06-23 06:54:03 +03:00

editLogSet.tpl

Redesign Admin Panel

2026-05-25 10:23:39 +03:00

editNewFunctions.tpl

Fix special medal system

2026-05-26 12:34:50 +03:00

editNewsboxSet.tpl

Redesign Admin Panel

2026-05-25 10:23:39 +03:00

editOverall.tpl

Admin panel design changed

2026-06-05 12:30:13 +03:00

editPassword.tpl

fix(admin): verify CSRF token in player-management admin Mods [#139] (#256)

2026-06-23 06:54:03 +03:00

editPlus.tpl

fix(admin): let editPlus subtract Plus/bonus days as the form advertises (#254)

2026-06-22 18:41:28 +03:00

editPlusSet.tpl

Redesign Admin Panel

2026-05-25 10:23:39 +03:00

editProtection.tpl

fix(admin): verify CSRF token in player-management admin Mods [#139] (#256)

2026-06-23 06:54:03 +03:00

editResources.tpl

fix(admin): verify CSRF token in village admin Mods [#139] (#259)

2026-06-23 10:31:08 +03:00

editServerSet.tpl

Fix map view in Admin Panel

2026-06-23 09:09:21 +03:00

editSitter.tpl

fix(admin): verify CSRF token in player-management admin Mods [#139] (#256)

2026-06-23 06:54:03 +03:00

editUser.tpl

fix(admin): verify CSRF token in player-management admin Mods [#139] (#256)

2026-06-23 06:54:03 +03:00

editVillage.tpl

fix(admin): verify CSRF token in village admin Mods [#139] (#259)

2026-06-23 10:31:08 +03:00

editWeek.tpl

Admin panel design changed

2026-06-05 12:30:13 +03:00

givePlus.tpl

fix(admin): verify CSRF token in Plus/Gold admin Mods [#139] (#253)

2026-06-22 18:40:43 +03:00

givePlusRes.tpl

fix(admin): verify CSRF token in Plus/Gold admin Mods [#139] (#253)

2026-06-22 18:40:43 +03:00

gold.tpl

fix(admin): verify CSRF token in Plus/Gold admin Mods [#139] (#253)

2026-06-22 18:40:43 +03:00

home.tpl

Redesign login page & main page in Admin Panel

2026-06-03 11:43:59 +03:00

inactive.tpl

Redesign Admin Panel

2026-05-25 10:23:39 +03:00

index.php

Change some text on license TravianZ

2025-02-11 11:22:22 +02:00

login.tpl

Redesign login page & main page in Admin Panel

2026-06-03 11:43:59 +03:00

maintenance.tpl

Fix Admin Panel view & some PHP 8.1+

2026-06-22 09:20:16 +03:00

maintenenceResetGold.tpl

Redesign Admin Panel

2026-05-25 10:23:39 +03:00

maintenenceResetPlus.tpl

Redesign Admin Panel

2026-05-25 10:23:39 +03:00

maintenenceResetPlusBonus.tpl

Redesign Admin Panel

2026-05-25 10:23:39 +03:00

map_tile.tpl

fix(admin): wire CSRF token into admin.php-routed forms [#139] (#244)

2026-06-20 06:44:12 +03:00

map.tpl

Fix map view in Admin Panel

2026-06-23 09:09:21 +03:00

massmessage.tpl

Translate some code

2026-06-02 11:35:35 +03:00

message.tpl

Redesign Admin Panel

2026-05-25 10:23:39 +03:00

msg.tpl

Fix msg in admin panel

2026-06-02 13:16:44 +03:00

natars.tpl

fix(admin): wire CSRF token into admin.php-routed forms [#139] (#244)

2026-06-20 06:44:12 +03:00

Newmessage.tpl

Admin panel design changed

2026-06-05 12:30:13 +03:00

notregistered.tpl

Redesign Admin Panel

2026-05-25 10:23:39 +03:00

online.tpl

Fix something broken

2026-06-04 12:35:53 +03:00

player.tpl

fix(profile): neutralize stored XSS in profile descriptions [#250] (#252)

2026-06-22 16:31:20 +03:00

playeradditionalinfo.tpl

Admin panel design changed

2026-06-05 12:30:13 +03:00

playerdeletion.tpl

Redesign Admin Panel

2026-05-25 10:23:39 +03:00

playerheroinfo.tpl

Admin panel design changed

2026-06-05 12:30:13 +03:00

playerinfo.tpl

Some fix

2026-06-22 10:41:25 +03:00

playermedals.tpl

Admin panel design changed

2026-06-05 12:30:13 +03:00

playerplusbonus.tpl

Redesign Admin Panel

2026-05-25 10:23:39 +03:00

punish.tpl

fix(admin): wire CSRF token into admin.php-routed forms [#139] (#244)

2026-06-20 06:44:12 +03:00

report.tpl

Some fix

2026-06-22 10:41:25 +03:00

resetdone.php

Translate some code

2026-06-02 11:35:35 +03:00

resetServer.php

feat: IP ban support (#185) (#188)

2026-06-09 15:15:27 +03:00

resetServer.tpl

fix admin colour

2026-06-05 12:54:48 +03:00

results_alliances.tpl

Admin panel design changed

2026-06-05 12:30:13 +03:00

results_email.tpl

Admin panel design changed

2026-06-05 12:30:13 +03:00

results_ip.tpl

Admin panel design changed

2026-06-05 12:30:13 +03:00

results_player.tpl

Admin panel design changed

2026-06-05 12:30:13 +03:00

results_villages.tpl

Admin panel design changed

2026-06-05 12:30:13 +03:00

search2.tpl

fix(admin): wire CSRF token into admin.php-routed forms [#139] (#244)

2026-06-20 06:44:12 +03:00

search.tpl

Some fix

2026-06-22 10:41:25 +03:00

server_info.tpl

Fix Admin Panel view & some PHP 8.1+

2026-06-22 09:20:16 +03:00

sysmessage.tpl

Edit some access for MH user and recreate mass messaage

2026-06-02 10:59:35 +03:00

techlog.tpl

Redesign Admin Panel

2026-05-25 10:23:39 +03:00

troops.tpl

Fix some bugs + added (coded delAli)

2026-05-25 12:37:33 +03:00

troopUpgrades.tpl

Edit some access for MH user and recreate mass messaage

2026-06-02 10:59:35 +03:00

usergold.tpl

fix(admin): verify CSRF token in Plus/Gold admin Mods [#139] (#253)

2026-06-22 18:40:43 +03:00

userillegallog.tpl

Redesign Admin Panel

2026-05-25 10:23:39 +03:00

userlogin.tpl

Redesign Admin Panel

2026-05-25 10:23:39 +03:00

users.tpl

Redesign Admin Panel

2026-05-25 10:23:39 +03:00

village.tpl

fix(admin): verify CSRF token in village admin Mods [#139] (#259)

2026-06-23 10:31:08 +03:00

villagelog.tpl

Redesign Admin Panel

2026-05-25 10:23:39 +03:00

villages.tpl

Admin panel design changed

2026-06-05 12:30:13 +03:00