Added reCAPTCHA (still needs some testing), updated links (finally), fixed one more invalid token error, fix very minor "exploit"
git-svn-id: http://kusabax.cultnet.net/svn/repo/stable@306 73d99b7e-4f53-4972-b7b7-2ecd3c4d89ee
This commit is contained in:
1 parent
9d84e86b7f
commit
0248cd497a
15 files changed
+336
-15
No files matched your search
@@ -2083,7 +2083,9 @@ class Manage {
|
||||
function editfiletypes() {
|
||||
global $tc_db, $tpl_page;
|
||||
$this->AdministratorsOnly();
|
||||
|
||||
if ($_POST['filetype'] == "htaccess") {
|
||||
exitWithErrorPage(_gettext('Invalid filetype.'));
|
||||
}
|
||||
$tpl_page .= '<h2>'. _gettext('Edit filetypes') . '</h2><br />';
|
||||
if (isset($_GET['do'])) {
|
||||
if ($_GET['do'] == 'addfiletype') {
|
||||
@@ -3049,7 +3051,7 @@ class Manage {
|
||||
<br /><hr />
|
||||
|
||||
<form action="manage_page.php?action=delposts" method="post">
|
||||
<input type="hidden" name="token" value="' . $_SESSION['token'] . '" />
|
||||
<input type="hidden" name="token" value="' . $_SESSION['token'] . '" />
|
||||
<label for="boarddir">'. _gettext('Board') .':</label>' .
|
||||
$this->MakeBoardListDropdown('boarddir', $this->BoardList($_SESSION['manageusername'])) .
|
||||
'<br />
|
||||
|
||||
Reference in new issue
Block a user