dbxe
/
fusionpbx
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

PIN Numbers - Export: Token integration.

This commit is contained in:
Nate 2020-02-17 06:13:14 -07:00
parent eaed0ec503
commit 55f43b210a
1 changed files with 16 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
app/pin_numbers/pin_download.php
View File

@ -25,7 +25,7 @@
*/
//includes
include "root.php";
require_once "root.php";
require_once "resources/require.php";
require_once "resources/check_auth.php";
require_once "resources/paging.php";
@ -85,6 +85,15 @@
//get the pin numbers from the database and send them as output
if (is_array($_REQUEST["column_group"]) && @sizeof($_REQUEST["column_group"]) != 0) {
//validate the token
$token = new token;
if (!$token->validate($_SERVER['PHP_SELF'])) {
message::add($text['message-invalid_token'],'negative');
header('Location: pin_numbers.php');
exit;
}
//validate submitted columns
foreach($_REQUEST["column_group"] as $column_name) {
if (in_array($column_name, $available_columns)) {
@ -105,6 +114,10 @@
}
}
//create token
$object = new token;
$token = $object->create($_SERVER['PHP_SELF']);
//include the header
$document['title'] = $text['title-pin_numbers'];
require_once "resources/header.php";
@ -146,6 +159,8 @@
echo "</table>\n";
echo "<br><br>\n";
echo "<input type='hidden' name='".$token['name']."' value='".$token['hash']."'>\n";
echo "</form>\n";
//include the footer