sydney/kusaba-x
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fixes invalid token errors

Browse Source 
git-svn-id: http://kusabax.cultnet.net/svn/repo/stable@286 73d99b7e-4f53-4972-b7b7-2ecd3c4d89ee
This commit is contained in:
Harrison committed 2011-04-28 23:44:47 +00:00
1 parent f9231938bc
commit 7a7c01acac
1 file changed
+10 -5
Download Patch File Download Diff File Expand all files Collapse all files
inc/classes/manage.class.php
+10 -5
View File
@@ -1258,6 +1258,7 @@ class Manage {
$output .= sprintf(_gettext('Are you absolutely sure you want to delete %s?'),'/'. $board_dir . '/') . $output .= sprintf(_gettext('Are you absolutely sure you want to delete %s?'),'/'. $board_dir . '/') .
'<br /> '<br />
<form action="manage_page.php?action=adddelboard" method="post"> <form action="manage_page.php?action=adddelboard" method="post">
<input type="hidden" name="token" value="' . $_SESSION['token'] . '" />
<input type="hidden" name="del" id="del" value="del" /> <input type="hidden" name="del" id="del" value="del" />
<input type="hidden" name="directory" id="directory" value="'. $dir . '" /> <input type="hidden" name="directory" id="directory" value="'. $dir . '" />
<input type="hidden" name="confirmation" id="confirmation" value="yes" /> <input type="hidden" name="confirmation" id="confirmation" value="yes" />
@@ -2906,10 +2907,12 @@ class Manage {
function delposts($multidel=false) { function delposts($multidel=false) {
global $tc_db, $tpl_page, $board_class; global $tc_db, $tpl_page, $board_class;
$isquickdel = false; $isquickdel = false;
if (isset($_POST['boarddir']) || isset($_GET['boarddir'])) { if (isset($_POST['boarddir']) || isset($_GET['boarddir'])) {
$this->CheckToken($_POST['token']); if (!isset($_GET['boarddir']) && isset($_POST['boarddir'])) {
if (isset($_GET['boarddir'])) { $this->CheckToken($_POST['token']);
}
if (isset($_GET['boarddir'])) {
$isquickdel = true; $isquickdel = true;
$_POST['boarddir'] = $_GET['boarddir']; $_POST['boarddir'] = $_GET['boarddir'];
if (isset($_GET['delthreadid'])) { if (isset($_GET['delthreadid'])) {
@@ -3642,7 +3645,9 @@ class Manage {
} }
if (isset($_POST['ip']) || isset($_POST['multiban'])) { if (isset($_POST['ip']) || isset($_POST['multiban'])) {
if ($_POST['ip'] != '' || !empty($_POST['multiban'])) { if ($_POST['ip'] != '' || !empty($_POST['multiban'])) {
$this->CheckToken($_POST['token']); if (!$from_ban) {
$this->CheckToken($_POST['token']);
}
$deletion_boards = array(); $deletion_boards = array();
$deletion_new_boards = array(); $deletion_new_boards = array();
$board_ids = ''; $board_ids = '';