Fixes invalid token errors
git-svn-id: http://kusabax.cultnet.net/svn/repo/stable@286 73d99b7e-4f53-4972-b7b7-2ecd3c4d89ee
This commit is contained in:
1 parent
f9231938bc
commit
7a7c01acac
1 file changed
+10
-5
@@ -1258,6 +1258,7 @@ class Manage {
|
||||
$output .= sprintf(_gettext('Are you absolutely sure you want to delete %s?'),'/'. $board_dir . '/') .
|
||||
'<br />
|
||||
<form action="manage_page.php?action=adddelboard" method="post">
|
||||
<input type="hidden" name="token" value="' . $_SESSION['token'] . '" />
|
||||
<input type="hidden" name="del" id="del" value="del" />
|
||||
<input type="hidden" name="directory" id="directory" value="'. $dir . '" />
|
||||
<input type="hidden" name="confirmation" id="confirmation" value="yes" />
|
||||
@@ -2906,10 +2907,12 @@ class Manage {
|
||||
function delposts($multidel=false) {
|
||||
global $tc_db, $tpl_page, $board_class;
|
||||
|
||||
$isquickdel = false;
|
||||
if (isset($_POST['boarddir']) || isset($_GET['boarddir'])) {
|
||||
$this->CheckToken($_POST['token']);
|
||||
if (isset($_GET['boarddir'])) {
|
||||
$isquickdel = false;
|
||||
if (isset($_POST['boarddir']) || isset($_GET['boarddir'])) {
|
||||
if (!isset($_GET['boarddir']) && isset($_POST['boarddir'])) {
|
||||
$this->CheckToken($_POST['token']);
|
||||
}
|
||||
if (isset($_GET['boarddir'])) {
|
||||
$isquickdel = true;
|
||||
$_POST['boarddir'] = $_GET['boarddir'];
|
||||
if (isset($_GET['delthreadid'])) {
|
||||
@@ -3642,7 +3645,9 @@ class Manage {
|
||||
}
|
||||
if (isset($_POST['ip']) || isset($_POST['multiban'])) {
|
||||
if ($_POST['ip'] != '' || !empty($_POST['multiban'])) {
|
||||
$this->CheckToken($_POST['token']);
|
||||
if (!$from_ban) {
|
||||
$this->CheckToken($_POST['token']);
|
||||
}
|
||||
$deletion_boards = array();
|
||||
$deletion_new_boards = array();
|
||||
$board_ids = '';
|
||||
|
||||
Reference in new issue
Block a user