diff options
| author | Tristan Darricau <github@nicofuma.fr> | 2016-10-02 17:18:22 +0200 |
|---|---|---|
| committer | Tristan Darricau <github@nicofuma.fr> | 2016-10-02 17:18:22 +0200 |
| commit | cd4190a72d48ec1c8faed96fb73408c8a8f1f302 (patch) | |
| tree | 9f8aeb89cba758bbd452fa1e94751bd7f19c6266 /phpBB/includes/acp/acp_database.php | |
| parent | cdaed8dabfbacd9db74cb302aaaf3efc756f02b8 (diff) | |
| parent | 4e5f29a21b79f58864669e0d1a62fa8287e11720 (diff) | |
| download | forums-cd4190a72d48ec1c8faed96fb73408c8a8f1f302.tar forums-cd4190a72d48ec1c8faed96fb73408c8a8f1f302.tar.gz forums-cd4190a72d48ec1c8faed96fb73408c8a8f1f302.tar.bz2 forums-cd4190a72d48ec1c8faed96fb73408c8a8f1f302.tar.xz forums-cd4190a72d48ec1c8faed96fb73408c8a8f1f302.zip | |
Merge pull request #4474 from marc1706/ticket/14789
[ticket/14789] Move form key checks to where they actually do something
* marc1706/ticket/14789:
[ticket/14789] Remove obsolete check_form_key() and add missing hashes
[ticket/14789] Move form key checks to where they actually do something
Diffstat (limited to 'phpBB/includes/acp/acp_database.php')
| -rw-r--r-- | phpBB/includes/acp/acp_database.php | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/phpBB/includes/acp/acp_database.php b/phpBB/includes/acp/acp_database.php index 16655ff4cb..dd0599e06a 100644 --- a/phpBB/includes/acp/acp_database.php +++ b/phpBB/includes/acp/acp_database.php @@ -42,11 +42,6 @@ class acp_database $form_key = 'acp_database'; add_form_key($form_key); - if ($submit && !check_form_key($form_key)) - { - trigger_error($user->lang['FORM_INVALID'] . adm_back_link($this->u_action), E_USER_WARNING); - } - $template->assign_vars(array( 'MODE' => $mode )); @@ -70,6 +65,11 @@ class acp_database trigger_error($user->lang['TABLE_SELECT_ERROR'] . adm_back_link($this->u_action), E_USER_WARNING); } + if (!check_form_key($form_key)) + { + trigger_error($user->lang['FORM_INVALID'] . adm_back_link($this->u_action), E_USER_WARNING); + } + $store = $download = $structure = $schema_data = false; if ($where == 'store_and_download' || $where == 'store') |