dbxe
/
fusionpbx
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Apps: Token integration.

This commit is contained in:
Nate 2019-09-19 07:47:28 -06:00
parent 7b908843c4
commit 81cd55f55c
1 changed files with 22 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

31
core/apps/apps_edit.php
View File

@ -59,6 +59,14 @@ if (count($_POST)>0 && strlen($_POST["persistformvar"]) == 0) {
$app_uuid = $_POST["app_uuid"]; $app_uuid = $_POST["app_uuid"];
} }
//validate the token
$token = new token;
if (!$token->validate($_SERVER['PHP_SELF'])) {
message::add($text['message-invalid_token'],'negative');
header('Location: apps.php');
exit;
}
//check for all required data //check for all required data
//if (strlen($app_enabled) == 0) { $msg .= "Please provide: Enabled<br>\n"; } //if (strlen($app_enabled) == 0) { $msg .= "Please provide: Enabled<br>\n"; }
if (strlen($msg) > 0 && strlen($_POST["persistformvar"]) == 0) { if (strlen($msg) > 0 && strlen($_POST["persistformvar"]) == 0) {
@ -99,15 +107,6 @@ if (count($_POST)>0 && strlen($_POST["persistformvar"]) == 0) {
} }
} }
//show the header
require_once "resources/header.php";
if ($action == "update") {
$document['title'] = $text['title-app-edit'];
}
if ($action == "add") {
$document['title'] = $text['title-app-add'];
}
//pre-populate the form //pre-populate the form
if (count($_GET)>0 && $_POST["persistformvar"] != "true") { if (count($_GET)>0 && $_POST["persistformvar"] != "true") {
$app_uuid = $_GET["id"]; $app_uuid = $_GET["id"];
@ -129,6 +128,19 @@ if (count($_POST)>0 && strlen($_POST["persistformvar"]) == 0) {
} }
} }
//create token
$object = new token;
$token = $object->create($_SERVER['PHP_SELF']);
//show the header
require_once "resources/header.php";
if ($action == "update") {
$document['title'] = $text['title-app-edit'];
}
if ($action == "add") {
$document['title'] = $text['title-app-add'];
}
//show the content //show the content
echo "<form method='post' name='frm' action=''>\n"; echo "<form method='post' name='frm' action=''>\n";
echo "<table width='100%' border='0' cellpadding='0' cellspacing='0'>\n"; echo "<table width='100%' border='0' cellpadding='0' cellspacing='0'>\n";
@ -195,6 +207,7 @@ if (count($_POST)>0 && strlen($_POST["persistformvar"]) == 0) {
if ($action == "update") { if ($action == "update") {
echo " <input type='hidden' name='app_uuid' value='$app_uuid'>\n"; echo " <input type='hidden' name='app_uuid' value='$app_uuid'>\n";
} }
echo " <input type='hidden' name='".$token['name']."' value='".$token['hash']."'>\n";
echo " <br>"; echo " <br>";
echo " <input type='submit' name='submit' class='btn' value='".$text['button-save']."'>\n"; echo " <input type='submit' name='submit' class='btn' value='".$text['button-save']."'>\n";
echo " </td>\n"; echo " </td>\n";