Merge pull request #9166 from MrPetovan/bug/phpinfo-accessible-hotfix

[Hotfix] Fix security vulnerability in admin modules

view/templates/admin/addons/details.tpl

@@ -24,6 +24,7 @@
 	{{if $admin_form}}
 	<h3>{{$settings}}</h3>
 	<form method="post" action="{{$baseurl}}/admin/{{$function}}/{{$addon}}">
+		<input type="hidden" name="form_security_token" value="{{$form_security_token}}">
 		{{$admin_form nofilter}}
 	</form>
 	{{/if}}

view/templates/admin/dbsync/failed_updates.tpl

@@ -10,7 +10,7 @@
 
 		<ul>
 			<li><a href="{{$baseurl}}/admin/dbsync/mark/{{$f}}">{{$mark}}</a></li>
-			<li><a href="{{$baseurl}}/admin/dbsync/{{$f}}">{{$apply}}</a></li>
+			<li><a href="{{$baseurl}}/admin/dbsync/update/{{$f}}">{{$apply}}</a></li>
 		</ul>
 
 		<hr />