dbxe
/
fusionpbx
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Groups: Token integration.

This commit is contained in:
Nate 2019-09-19 07:57:09 -06:00
parent 5b93318a7a
commit d957a4a60e
1 changed files with 17 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
core/groups/groupedit.php
View File

@ -53,6 +53,14 @@
$group_level = $_POST["group_level"];
$group_description = $_POST["group_description"];
//validate the token
$token = new token;
if (!$token->validate($_SERVER['PHP_SELF'])) {
message::add($text['message-invalid_token'],'negative');
header('Location: groups.php');
exit;
}
//check for global/domain duplicates
$sql = "select count(*) from v_groups ";
$sql .= "where group_name = :group_name ";
@ -281,6 +289,10 @@
unset($sql, $parameters, $row);
}
//create token
$object = new token;
$token = $object->create($_SERVER['PHP_SELF']);
//include the header
include "resources/header.php";
$document['title'] = $text['title-group_edit'];
@ -302,7 +314,6 @@
//show the content
echo "<form name='login' method='post' action=''>\n";
echo "<input type='hidden' name='group_uuid' value='".escape($group_uuid)."'>\n";
echo "<table width='100%' cellpadding='0' cellspacing='0'>\n";
echo " <tr>\n";
@ -389,6 +400,10 @@
echo "<tr>\n";
echo "<td colspan='2' align='right'>\n";
if (is_uuid($group_uuid)) {
echo " <input type='hidden' name='group_uuid' value='".escape($group_uuid)."'>\n";
}
echo " <input type='hidden' name='".$token['name']."' value='".$token['hash']."'>\n";
echo " <br />";
echo " <input type='submit' class='btn' value=\"".$text['button-save']."\">\n";
echo "</td>\n";
@ -401,4 +416,4 @@
//include the footer
include "resources/footer.php";
?>
?>