Version 4.5.0

applications/core/modules/admin/promotion/analytics.php

@@ -11,7 +11,7 @@
 namespace IPS\core\modules\admin\promotion;
 
 /* To prevent PHP errors (extending class does not exist) revealing path */
-if ( !defined( '\IPS\SUITE_UNIQUE_KEY' ) )
+if ( !\defined( '\IPS\SUITE_UNIQUE_KEY' ) )
 {
 	header( ( isset( $_SERVER['SERVER_PROTOCOL'] ) ? $_SERVER['SERVER_PROTOCOL'] : 'HTTP/1.0' ) . ' 403 Forbidden' );
 	exit;
@@ -22,6 +22,11 @@ if ( !defined( '\IPS\SUITE_UNIQUE_KEY' ) )
  */
 class _analytics extends \IPS\Dispatcher\Controller
 {
+	/**
+	 * @brief	Has been CSRF-protected
+	 */
+	public static $csrfProtected = TRUE;
+	
 	/**
 	 * Execute
 	 *
@@ -85,6 +90,11 @@ class _analytics extends \IPS\Dispatcher\Controller
 				$values['ipseo_ga'] = $values['analytics_' . $values['ipbseo_ga_provider'] ];
 			}
 
+			foreach( $providers as $key => $provider )
+			{
+				unset( $values['analytics_' . $key ] );
+			}
+
 			$form->saveAsSettings( $values );
 			
 			\IPS\Session::i()->log( 'acplog__analytics_edited' );