Changeset 153


Ignore:
Timestamp:
Oct 14, 2012, 8:35:58 PM (12 years ago)
Author:
luciano
Message:

Protezione cfrs.
Per aggiungere un input token ai form
Aggiunge il campo secret alla tabella _config per la creazione del token

Location:
trunk/client
Files:
2 added
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/client/modules.php

    r80 r153  
    11<?php
    2 
    32
    43/************************************************************************/
     
    1211
    1312// Additional security (Union, CLike, XSS)
    14 
    1513// We want to use the function stripos,
    1614// but thats only available since PHP5.
     
    105103}
    106104mysql_query("SET NAMES 'utf8'", $dbi);
     105
     106# protezione csrf ottobre 2012 - by l.apolito
     107if (file_exists("inc/csrf-magic/csrf-magic.php")) {
     108        include_once 'inc/csrf-magic/csrf-magic.php';
     109}
     110
     111
     112
     113
     114
    107115
    108116# carica i parametri di default sulla tabella
     
    220228$file=(isset($_GET['file'])) ? htmlentities($_GET['file']):"index";
    221229$name=(isset($_GET['name'])) ? htmlentities($_GET['name']):"Elezioni";
     230$op=(isset($_GET['op'])) ? htmlentities($_GET['op']):"gruppo";
    222231if (!isset($_GET['op'])) $_GET['op']="gruppo";
    223232
Note: See TracChangeset for help on using the changeset viewer.