die louder if CSRF is missing for admin actions
This commit is contained in:
parent
7f20b17a59
commit
ea1867f92d
1 changed files with 2 additions and 0 deletions
|
@ -58,6 +58,8 @@ class AdminPage extends Extension
|
||||||
shm_set_timeout(null);
|
shm_set_timeout(null);
|
||||||
$database->set_timeout(null);
|
$database->set_timeout(null);
|
||||||
send_event($aae);
|
send_event($aae);
|
||||||
|
} else {
|
||||||
|
throw new SCoreException("Invalid CSRF token");
|
||||||
}
|
}
|
||||||
|
|
||||||
if ($aae->redirect) {
|
if ($aae->redirect) {
|
||||||
|
|
Reference in a new issue