Merge pull request #20559 from FHenry/14.0_fix_token_referentObject_page
FIX: Filter on Object Referent page give CRSF page
This commit is contained in:
commit
11b0d7ba6f
@ -247,6 +247,7 @@ if ($id > 0 || !empty($ref)) {
|
|||||||
}
|
}
|
||||||
|
|
||||||
print '<form method="post" action="'.$_SERVER['PHP_SELF'].'?id='.$product->id.'" name="search_form">'."\n";
|
print '<form method="post" action="'.$_SERVER['PHP_SELF'].'?id='.$product->id.'" name="search_form">'."\n";
|
||||||
|
print '<input type="hidden" name="token" value="'.newToken().'">';
|
||||||
if (!empty($sortfield)) {
|
if (!empty($sortfield)) {
|
||||||
print '<input type="hidden" name="sortfield" value="'.$sortfield.'"/>';
|
print '<input type="hidden" name="sortfield" value="'.$sortfield.'"/>';
|
||||||
}
|
}
|
||||||
|
|||||||
@ -198,6 +198,7 @@ if ($id > 0 || !empty($ref)) {
|
|||||||
}
|
}
|
||||||
|
|
||||||
print '<form method="post" action="'.$_SERVER['PHP_SELF'].'?id='.$product->id.'" name="search_form">'."\n";
|
print '<form method="post" action="'.$_SERVER['PHP_SELF'].'?id='.$product->id.'" name="search_form">'."\n";
|
||||||
|
print '<input type="hidden" name="token" value="'.newToken().'">';
|
||||||
if (!empty($sortfield)) {
|
if (!empty($sortfield)) {
|
||||||
print '<input type="hidden" name="sortfield" value="'.$sortfield.'"/>';
|
print '<input type="hidden" name="sortfield" value="'.$sortfield.'"/>';
|
||||||
}
|
}
|
||||||
|
|||||||
@ -183,7 +183,7 @@ if ($id > 0 || !empty($ref)) {
|
|||||||
}
|
}
|
||||||
|
|
||||||
print '<form method="post" action="'.$_SERVER['PHP_SELF'].'?id='.$product->id.'" name="search_form">'."\n";
|
print '<form method="post" action="'.$_SERVER['PHP_SELF'].'?id='.$product->id.'" name="search_form">'."\n";
|
||||||
|
print '<input type="hidden" name="token" value="'.newToken().'">';
|
||||||
if (!empty($sortfield)) {
|
if (!empty($sortfield)) {
|
||||||
print '<input type="hidden" name="sortfield" value="'.$sortfield.'"/>';
|
print '<input type="hidden" name="sortfield" value="'.$sortfield.'"/>';
|
||||||
}
|
}
|
||||||
|
|||||||
@ -214,6 +214,7 @@ if ($id > 0 || !empty($ref)) {
|
|||||||
}
|
}
|
||||||
|
|
||||||
print '<form method="post" action="'.$_SERVER ['PHP_SELF'].'?id='.$product->id.'" name="search_form">'."\n";
|
print '<form method="post" action="'.$_SERVER ['PHP_SELF'].'?id='.$product->id.'" name="search_form">'."\n";
|
||||||
|
print '<input type="hidden" name="token" value="'.newToken().'">';
|
||||||
if (!empty($sortfield)) {
|
if (!empty($sortfield)) {
|
||||||
print '<input type="hidden" name="sortfield" value="'.$sortfield.'"/>';
|
print '<input type="hidden" name="sortfield" value="'.$sortfield.'"/>';
|
||||||
}
|
}
|
||||||
|
|||||||
@ -197,6 +197,7 @@ if ($id > 0 || !empty($ref)) {
|
|||||||
}
|
}
|
||||||
|
|
||||||
print '<form method="post" action="'.$_SERVER['PHP_SELF'].'?id='.$product->id.'" name="search_form">'."\n";
|
print '<form method="post" action="'.$_SERVER['PHP_SELF'].'?id='.$product->id.'" name="search_form">'."\n";
|
||||||
|
print '<input type="hidden" name="token" value="'.newToken().'">';
|
||||||
if (!empty($sortfield)) {
|
if (!empty($sortfield)) {
|
||||||
print '<input type="hidden" name="sortfield" value="'.$sortfield.'"/>';
|
print '<input type="hidden" name="sortfield" value="'.$sortfield.'"/>';
|
||||||
}
|
}
|
||||||
|
|||||||
@ -176,6 +176,7 @@ if ($id > 0 || !empty($ref)) {
|
|||||||
}
|
}
|
||||||
|
|
||||||
print '<form method="post" action="'.$_SERVER['PHP_SELF'].'?id='.$product->id.'" name="search_form">'."\n";
|
print '<form method="post" action="'.$_SERVER['PHP_SELF'].'?id='.$product->id.'" name="search_form">'."\n";
|
||||||
|
print '<input type="hidden" name="token" value="'.newToken().'">';
|
||||||
if (!empty($sortfield)) {
|
if (!empty($sortfield)) {
|
||||||
print '<input type="hidden" name="sortfield" value="'.$sortfield.'"/>';
|
print '<input type="hidden" name="sortfield" value="'.$sortfield.'"/>';
|
||||||
}
|
}
|
||||||
|
|||||||
@ -199,6 +199,7 @@ if ($id > 0 || !empty($ref)) {
|
|||||||
}
|
}
|
||||||
|
|
||||||
print '<form method="post" action="'.$_SERVER['PHP_SELF'].'?id='.$product->id.'" name="search_form">'."\n";
|
print '<form method="post" action="'.$_SERVER['PHP_SELF'].'?id='.$product->id.'" name="search_form">'."\n";
|
||||||
|
print '<input type="hidden" name="token" value="'.newToken().'">';
|
||||||
if (!empty($sortfield)) {
|
if (!empty($sortfield)) {
|
||||||
print '<input type="hidden" name="sortfield" value="'.$sortfield.'"/>';
|
print '<input type="hidden" name="sortfield" value="'.$sortfield.'"/>';
|
||||||
}
|
}
|
||||||
|
|||||||
@ -198,6 +198,7 @@ if ($id > 0 || !empty($ref)) {
|
|||||||
}
|
}
|
||||||
|
|
||||||
print '<form method="post" action="'.$_SERVER['PHP_SELF'].'?id='.$product->id.'" name="search_form">'."\n";
|
print '<form method="post" action="'.$_SERVER['PHP_SELF'].'?id='.$product->id.'" name="search_form">'."\n";
|
||||||
|
print '<input type="hidden" name="token" value="'.newToken().'">';
|
||||||
if (!empty($sortfield)) {
|
if (!empty($sortfield)) {
|
||||||
print '<input type="hidden" name="sortfield" value="'.$sortfield.'"/>';
|
print '<input type="hidden" name="sortfield" value="'.$sortfield.'"/>';
|
||||||
}
|
}
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user