CSRF protection

2017-05-15 11:36:31 +02:00
parent 88b0f84f3c
commit 4c6cfa66a8
6 changed files with 37 additions and 23 deletions
--- a/data/web/admin.php
+++ b/data/web/admin.php
@@ -351,6 +351,7 @@ $tfa_data = get_tfa();
 <?php
 $lang_admin = json_encode($lang['admin']);
 echo "var lang = ". $lang_admin . ";\n";
+echo "var csrf_token = '". $_SESSION['CSRF']['TOKEN'] . "';\n";
 echo "var pagination_size = '". $PAGINATION_SIZE . "';\n";
 ?>
 </script>