diff options
| author | Nathan Guse <nathaniel.guse@gmail.com> | 2012-09-27 19:21:57 -0500 |
|---|---|---|
| committer | Nathan Guse <nathaniel.guse@gmail.com> | 2012-09-27 19:21:57 -0500 |
| commit | 07616bfa92654473580dc55ccda95139e8595575 (patch) | |
| tree | 005f7b0a7d4526cbd0e0ae37fa902743de7f115a /phpBB/includes/ucp | |
| parent | ba7289b9d273df4f3dfb228ab37d324ff17cc9db (diff) | |
| download | forums-07616bfa92654473580dc55ccda95139e8595575.tar forums-07616bfa92654473580dc55ccda95139e8595575.tar.gz forums-07616bfa92654473580dc55ccda95139e8595575.tar.bz2 forums-07616bfa92654473580dc55ccda95139e8595575.tar.xz forums-07616bfa92654473580dc55ccda95139e8595575.zip | |
[ticket/11103] UCP Notifications Options Form Key
PHPBB3-11103
Diffstat (limited to 'phpBB/includes/ucp')
| -rw-r--r-- | phpBB/includes/ucp/ucp_notifications.php | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/phpBB/includes/ucp/ucp_notifications.php b/phpBB/includes/ucp/ucp_notifications.php index ad399ca290..950b70a156 100644 --- a/phpBB/includes/ucp/ucp_notifications.php +++ b/phpBB/includes/ucp/ucp_notifications.php @@ -23,6 +23,8 @@ class ucp_notifications { global $phpbb_container; + add_form_key('ucp_notification_options'); + $phpbb_notifications = $phpbb_container->get('notifications'); $template = $phpbb_container->get('template'); $user = $phpbb_container->get('user'); @@ -33,6 +35,11 @@ class ucp_notifications // Add/remove subscriptions if ($request->is_set_post('submit')) { + if (!check_form_key('ucp_notification_options')) + { + trigger_error('FORM_INVALID'); + } + $notification_methods = $phpbb_notifications->get_subscription_methods(); foreach($phpbb_notifications->get_subscription_types() as $type => $data) |