From 7a7c01acac6891a6e7d8c5da4a330952c0b7ff38 Mon Sep 17 00:00:00 2001
From: Harrison <Harrison@73d99b7e-4f53-4972-b7b7-2ecd3c4d89ee>
Date: Thu, 28 Apr 2011 23:44:47 +0000
Subject: [PATCH] Fixes invalid token errors

git-svn-id: http://kusabax.cultnet.net/svn/repo/stable@286 73d99b7e-4f53-4972-b7b7-2ecd3c4d89ee
---
 inc/classes/manage.class.php | 15 ++++++++++-----
 1 file changed, 10 insertions(+), 5 deletions(-)

diff --git a/inc/classes/manage.class.php b/inc/classes/manage.class.php
index 3b72a2c..b3e3c94 100644
--- a/inc/classes/manage.class.php
+++ b/inc/classes/manage.class.php
@@ -1258,6 +1258,7 @@ class Manage {
 					$output .= sprintf(_gettext('Are you absolutely sure you want to delete %s?'),'/'. $board_dir . '/') .
 					'<br />
 					<form action="manage_page.php?action=adddelboard" method="post">
+          <input type="hidden" name="token" value="' . $_SESSION['token'] . '" />
 					<input type="hidden" name="del" id="del" value="del" />
 					<input type="hidden" name="directory" id="directory" value="'. $dir . '" />
 					<input type="hidden" name="confirmation" id="confirmation" value="yes" />
@@ -2906,10 +2907,12 @@ class Manage {
 	function delposts($multidel=false) {
 		global $tc_db, $tpl_page, $board_class;
 
-		$isquickdel = false;
-		if (isset($_POST['boarddir']) || isset($_GET['boarddir'])) {
-      $this->CheckToken($_POST['token']);
-			if (isset($_GET['boarddir'])) {
+    $isquickdel = false;
+    if (isset($_POST['boarddir']) || isset($_GET['boarddir'])) {
+      if (!isset($_GET['boarddir']) && isset($_POST['boarddir'])) {
+        $this->CheckToken($_POST['token']);
+      }
+      if (isset($_GET['boarddir'])) {
 				$isquickdel = true;
 				$_POST['boarddir'] = $_GET['boarddir'];
 				if (isset($_GET['delthreadid'])) {
@@ -3642,7 +3645,9 @@ class Manage {
 		}
 		if (isset($_POST['ip']) || isset($_POST['multiban'])) {
 			if ($_POST['ip'] != '' || !empty($_POST['multiban'])) {
-        $this->CheckToken($_POST['token']);
+        if (!$from_ban) {
+          $this->CheckToken($_POST['token']);
+        }
 				$deletion_boards = array();
 				$deletion_new_boards = array();
 				$board_ids = '';