CSRF protection

2017-05-15 11:36:31 +02:00
parent 88b0f84f3c
commit 4c6cfa66a8
6 changed files with 37 additions and 23 deletions
--- a/data/web/inc/footer.inc.php
+++ b/data/web/inc/footer.inc.php
@@ -225,6 +225,7 @@ $(document).ready(function() {
 			}
 		});
 	});
+  $("<input type='hidden' value='<?=$_SESSION['CSRF']['TOKEN'];?>' />").attr("id", "csrf_token").attr("name", "csrf_token").appendTo("form");
 });
 </script>