Mibew/mibew
1
0
Fork 0
mirror of https://github.com/Mibew/mibew.git synced 2025-03-01 01:24:32 +03:00
Code Issues Actions Packages Projects Releases Wiki Activity

Remove "&" from "get_csrf_token_in_url" function's result

Browse Source
This commit is contained in:
Dmitriy Simushev 2014-05-23 07:53:09 +00:00
parent 16749fec8c
commit 4d45e57a9b
3 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/mibew/libs/common/csrf.php
View File

@ -69,7 +69,7 @@ function get_csrf_token_in_url()
{
set_csrf_token();
return "&csrf_token=" . $_SESSION['csrf_token'];
return "csrf_token=" . $_SESSION['csrf_token'];
}
/* set csrf token */

2
src/mibew/styles/pages/default/templates_src/server_side/blocked_visitors.handlebars
View File

@ -56,7 +56,7 @@
<td>{{cutString comment "30"}}</td>
<td>
<a class="removelink" id="i{{banid}}" href="{{../mibewRoot}}/operator/blocked.php?act=del&amp;id={{banid}}{{csrfTokenInUrl}}">
<a class="removelink" id="i{{banid}}" href="{{../mibewRoot}}/operator/blocked.php?act=del&amp;id={{banid}}&amp;{{csrfTokenInUrl}}">
{{l10n "remove.item"}}
</a>,
<a href="{{../mibewRoot}}/operator/ban.php?id={{banid}}"

2
src/mibew/styles/pages/default/templates_src/server_side/canned_messages.handlebars
View File

@ -74,7 +74,7 @@
<td>
<a href="{{../mibewRoot}}/operator/canned-message/{{id}}/edit" target="_blank"
onclick="this.newWindow = window.open('{{../mibewRoot}}/operator/canned-message/{{id}}/edit', '', 'toolbar=0,scrollbars=1,location=0,status=1,menubar=0,width=640,height=480,resizable=1');this.newWindow.focus();this.newWindow.opener=window;return false;">{{l10n "canned.actions.edit"}}</a>,
<a href="{{../mibewRoot}}/operator/canned-message/{{id}}/delete?lang={{../formlang}}&amp;group={{../formgroup}}{{csrfTokenInUrl}}">{{l10n "canned.actions.del"}}</a>
<a href="{{../mibewRoot}}/operator/canned-message/{{id}}/delete?lang={{../formlang}}&amp;group={{../formgroup}}&amp;{{csrfTokenInUrl}}">{{l10n "canned.actions.del"}}</a>
</td>
</tr>
{{else}}