tobias/friendica
1
0
Fork 0
Code Pull requests Activity

XSRF protection and PHPdoc for mod/admin.php

Browse source
This commit is contained in:
Tobias Hößl 2012-04-18 07:36:48 +00:00
parent d7e750ad74
commit b885fedee1
3 changed files with 15 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
mod/admin.php
View file

@ -616,6 +616,8 @@ function admin_page_plugins(&$a){
} }
if (x($_GET,"a") && $_GET['a']=="t"){ if (x($_GET,"a") && $_GET['a']=="t"){
check_form_security_token_redirectOnErr('/admin/plugins', 'admin_themes', 't');
// Toggle plugin status // Toggle plugin status
$idx = array_search($plugin, $a->plugins); $idx = array_search($plugin, $a->plugins);
if ($idx !== false){ if ($idx !== false){
@ -673,7 +675,9 @@ function admin_page_plugins(&$a){
'$admin_form' => $admin_form, '$admin_form' => $admin_form,
'$function' => 'plugins', '$function' => 'plugins',
'$screenshot' => '', '$screenshot' => '',
'$readme' => $readme '$readme' => $readme,
'$form_security_token' => get_form_security_token("admin_themes"),
)); ));
} }
@ -702,7 +706,8 @@ function admin_page_plugins(&$a){
'$submit' => t('Submit'), '$submit' => t('Submit'),
'$baseurl' => $a->get_baseurl(true), '$baseurl' => $a->get_baseurl(true),
'$function' => 'plugins', '$function' => 'plugins',
'$plugins' => $plugins '$plugins' => $plugins,
'$form_security_token' => get_form_security_token("admin_themes"),
)); ));
} }
@ -810,6 +815,7 @@ function admin_page_themes(&$a){
} }
if (x($_GET,"a") && $_GET['a']=="t"){ if (x($_GET,"a") && $_GET['a']=="t"){
check_form_security_token_redirectOnErr('/admin/themes', 'admin_themes', 't');
// Toggle theme status // Toggle theme status
@ -873,7 +879,9 @@ function admin_page_themes(&$a){
'$str_author' => t('Author: '), '$str_author' => t('Author: '),
'$str_maintainer' => t('Maintainer: '), '$str_maintainer' => t('Maintainer: '),
'$screenshot' => $screenshot, '$screenshot' => $screenshot,
'$readme' => $readme '$readme' => $readme,
'$form_security_token' => get_form_security_token("admin_themes"),
)); ));
} }
@ -899,7 +907,8 @@ function admin_page_themes(&$a){
'$function' => 'themes', '$function' => 'themes',
'$plugins' => $xthemes, '$plugins' => $xthemes,
'$experimental' => t('[Experimental]'), '$experimental' => t('[Experimental]'),
'$unsupported' => t('[Unsupported]') '$unsupported' => t('[Unsupported]'),
'$form_security_token' => get_form_security_token("admin_themes"),
)); ));
} }

2
view/admin_plugins.tpl
View file

@ -4,7 +4,7 @@
<ul id='pluginslist'> <ul id='pluginslist'>
{{ for $plugins as $p }} {{ for $plugins as $p }}
<li class='plugin $p.1'> <li class='plugin $p.1'>
<a class='toggleplugin' href='$baseurl/admin/$function/$p.0?a=t' title="{{if $p.1==on }}Disable{{ else }}Enable{{ endif }}" ><span class='icon $p.1'></span></a> <a class='toggleplugin' href='$baseurl/admin/$function/$p.0?a=t&amp;t=$form_security_token' title="{{if $p.1==on }}Disable{{ else }}Enable{{ endif }}" ><span class='icon $p.1'></span></a>
<a href='$baseurl/admin/$function/$p.0'><span class='name'>$p.2.name</span></a> - <span class="version">$p.2.version</span> <a href='$baseurl/admin/$function/$p.0'><span class='name'>$p.2.name</span></a> - <span class="version">$p.2.version</span>
{{ if $p.2.experimental }} $experimental {{ endif }}{{ if $p.2.unsupported }} $unsupported {{ endif }} {{ if $p.2.experimental }} $experimental {{ endif }}{{ if $p.2.unsupported }} $unsupported {{ endif }}

2
view/admin_plugins_details.tpl
View file

@ -1,7 +1,7 @@
<div id='adminpage'> <div id='adminpage'>
<h1>$title - $page</h1> <h1>$title - $page</h1>
<p><span class='toggleplugin icon $status'></span> $info.name - $info.version : <a href="$baseurl/admin/$function/$plugin/?a=t">$action</a></p> <p><span class='toggleplugin icon $status'></span> $info.name - $info.version : <a href="$baseurl/admin/$function/$plugin/?a=t&amp;t=$form_security_token">$action</a></p>
<p>$info.description</p> <p>$info.description</p>
<p class="author">$str_author <p class="author">$str_author