Added reCAPTCHA (still needs some testing), updated links (finally), fixed one more invalid token error, fix very minor "exploit"

git-svn-id: http://kusabax.cultnet.net/svn/repo/stable@306 73d99b7e-4f53-4972-b7b7-2ecd3c4d89ee
This commit is contained in:
Sazpaimon committed 2011-07-26 16:19:55 +00:00
1 parent 9d84e86b7f
commit 0248cd497a
15 files changed
+336 -15

No files matched your search

+4 -2
View File
@@ -2083,7 +2083,9 @@ class Manage {
function editfiletypes() {
global $tc_db, $tpl_page;
$this->AdministratorsOnly();
if ($_POST['filetype'] == "htaccess") {
exitWithErrorPage(_gettext('Invalid filetype.'));
}
$tpl_page .= '<h2>'. _gettext('Edit filetypes') . '</h2><br />';
if (isset($_GET['do'])) {
if ($_GET['do'] == 'addfiletype') {
@@ -3049,7 +3051,7 @@ class Manage {
<br /><hr />
<form action="manage_page.php?action=delposts" method="post">
<input type="hidden" name="token" value="' . $_SESSION['token'] . '" />
<input type="hidden" name="token" value="' . $_SESSION['token'] . '" />
<label for="boarddir">'. _gettext('Board') .':</label>' .
$this->MakeBoardListDropdown('boarddir', $this->BoardList($_SESSION['manageusername'])) .
'<br />