diff options
| author | Joas Schilling <nickvergessen@gmx.de> | 2013-06-03 10:54:16 +0200 |
|---|---|---|
| committer | Joas Schilling <nickvergessen@gmx.de> | 2013-06-03 10:54:16 +0200 |
| commit | 0eae9eb75d4a66d0064df7095aacb8907cde3572 (patch) | |
| tree | cf3f957b8dda55ec44d7e04807c9498c40ae1b99 | |
| parent | 96b4066368e6e9c7f701daac7440807cce345702 (diff) | |
| download | forums-0eae9eb75d4a66d0064df7095aacb8907cde3572.tar forums-0eae9eb75d4a66d0064df7095aacb8907cde3572.tar.gz forums-0eae9eb75d4a66d0064df7095aacb8907cde3572.tar.bz2 forums-0eae9eb75d4a66d0064df7095aacb8907cde3572.tar.xz forums-0eae9eb75d4a66d0064df7095aacb8907cde3572.zip | |
[ticket/10840] Add check_form_key to acp_groups.php
PHPBB3-10840
| -rw-r--r-- | phpBB/includes/acp/acp_groups.php | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/phpBB/includes/acp/acp_groups.php b/phpBB/includes/acp/acp_groups.php index 83c355540e..9b9ea38e07 100644 --- a/phpBB/includes/acp/acp_groups.php +++ b/phpBB/includes/acp/acp_groups.php @@ -80,6 +80,11 @@ class acp_groups case 'approve': case 'demote': case 'promote': + if (!check_form_key($form_key)) + { + trigger_error($user->lang['FORM_INVALID'] . adm_back_link($this->u_action), E_USER_WARNING); + } + if (!$group_id) { trigger_error($user->lang['NO_GROUP'] . adm_back_link($this->u_action), E_USER_WARNING); @@ -252,6 +257,11 @@ class acp_groups break; case 'addusers': + if (!check_form_key($form_key)) + { + trigger_error($user->lang['FORM_INVALID'] . adm_back_link($this->u_action), E_USER_WARNING); + } + if (!$group_id) { trigger_error($user->lang['NO_GROUP'] . adm_back_link($this->u_action), E_USER_WARNING); |