dbxe
/
fusionpbx
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Groups: Token integration.

This commit is contained in:
Nate 2019-09-19 08:04:04 -06:00
parent d054f15300
commit bd438e4f39
2 changed files with 13 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
core/groups/groupmemberadd.php
View File

@ -50,6 +50,14 @@
$group_name = $_POST["group_name"];
$user_uuid = $_POST["user_uuid"];
//validate the token
$token = new token;
if (!$token->validate('/core/groups/groupmembers.php')) {
message::add($text['message-invalid_token'],'negative');
header('Location: groups.php');
exit;
}
//add the user to the group
if (is_uuid($user_uuid) && is_uuid($group_uuid) && strlen($group_name) > 0) {
$array['user_groups'][0]['user_group_uuid'] = uuid();

5
core/groups/groupmembers.php
View File

@ -109,6 +109,10 @@
$result = $database->select($sql, $parameters, 'all');
unset($sql, $parameters);
//create token
$object = new token;
$token = $object->create('/core/groups/groupmembers.php');
//include the header
require_once "resources/header.php";
$document['title'] = $text['title-group_members'];
@ -141,6 +145,7 @@
echo " <input type='hidden' name='domain_uuid' value='".(($domain_uuid != '') ? $domain_uuid : $_SESSION['domain_uuid'])."'>";
echo " <input type='hidden' name='group_uuid' value='".$group_uuid."'>";
echo " <input type='hidden' name='group_name' value='".$group_name."'>";
echo " <input type='hidden' name='".$token['name']."' value='".$token['hash']."'>\n";
echo " <input type='submit' class='btn' value='".$text['button-add_member']."'>";
echo " </form>";
echo " </td>\n";