lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix: niveau alatoire du jeton sur le confirm_form, on le scurise que si il contient

Browse Source 
des donnes POST
This commit is contained in:
Regis Houssin 2009-05-16 16:51:09 +00:00
parent 36c58c62fc
commit 9f86fcc443
3 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
htdocs/comm/mailing/fiche.php
View File

@ -20,7 +20,7 @@
/** /**
* \file htdocs/comm/mailing/fiche.php * \file htdocs/comm/mailing/fiche.php
* \ingroup mailing * \ingroup mailing
* \brief Fiche mailing, onglet g<EFBFBD>n<EFBFBD>ral * \brief Fiche mailing, onglet general
* \version $Id$ * \version $Id$
*/ */
@ -527,21 +527,21 @@ else
// Confirmation de la validation du mailing // Confirmation de la validation du mailing
if ($_GET["action"] == 'valide') if ($_GET["action"] == 'valide')
{ {
$ret=$html->form_confirm("fiche.php?id=".$mil->id,$langs->trans("ValidMailing"),$langs->trans("ConfirmValidMailing"),"confirm_valide"); $ret=$html->form_confirm($_SERVER["PHP_SELF"]."?id=".$mil->id,$langs->trans("ValidMailing"),$langs->trans("ConfirmValidMailing"),"confirm_valide");
if ($ret == 'html') print '<br>'; if ($ret == 'html') print '<br>';
} }
// Confirm reset // Confirm reset
if ($_GET["action"] == 'reset') if ($_GET["action"] == 'reset')
{ {
$ret=$html->form_confirm("fiche.php?id=".$mil->id,$langs->trans("ResetMailing"),$langs->trans("ConfirmResetMailing",$mil->ref),"confirm_reset"); $ret=$html->form_confirm($_SERVER["PHP_SELF"]."?id=".$mil->id,$langs->trans("ResetMailing"),$langs->trans("ConfirmResetMailing",$mil->ref),"confirm_reset");
if ($ret == 'html') print '<br>'; if ($ret == 'html') print '<br>';
} }
// Confirm delete // Confirm delete
if ($_GET["action"] == 'delete') if ($_GET["action"] == 'delete')
{ {
$ret=$html->form_confirm("fiche.php?id=".$mil->id,$langs->trans("DeleteAMailing"),$langs->trans("ConfirmDeleteMailing"),"confirm_delete"); $ret=$html->form_confirm($_SERVER["PHP_SELF"]."?id=".$mil->id,$langs->trans("DeleteAMailing"),$langs->trans("ConfirmDeleteMailing"),"confirm_delete");
if ($ret == 'html') print '<br>'; if ($ret == 'html') print '<br>';
} }

2
htdocs/html.form.class.php
View File

@ -1619,7 +1619,7 @@ class Form
{ {
print '<form method="post" action="'.$page.'" class="notoptoleftroright">'; print '<form method="post" action="'.$page.'" class="notoptoleftroright">';
print '<input type="hidden" name="action" value="'.$action.'">'; print '<input type="hidden" name="action" value="'.$action.'">';
print '<input type="hidden" name="token_level_2" value="'.$_SESSION['newtoken'].'">'; if (is_array($formquestion)) print '<input type="hidden" name="token_level_2" value="'.$_SESSION['newtoken'].'">';
print '<table width="100%" class="valid">'; print '<table width="100%" class="valid">';

4
htdocs/main.inc.php
View File

@ -183,8 +183,8 @@ if (isset($_POST['token_level_1']) && isset($_SESSION['token_level_1']))
//print 'session_token_level_1='.$_SESSION['token_level_1'].'<br>'; //print 'session_token_level_1='.$_SESSION['token_level_1'].'<br>';
if ($_POST['token_level_1'] != $_SESSION['token_level_1']) if ($_POST['token_level_1'] != $_SESSION['token_level_1'])
{ {
unset($_POST);
dol_syslog("Invalid token_level_1 in ".$_SERVER['HTTP_REFERER'].", action=".$_POST['action'].", _POST['token_level_1']=".$_POST['token_level_1'].", _SESSION['token_level_1']=".$_SESSION['token_level_1']); dol_syslog("Invalid token_level_1 in ".$_SERVER['HTTP_REFERER'].", action=".$_POST['action'].", _POST['token_level_1']=".$_POST['token_level_1'].", _SESSION['token_level_1']=".$_SESSION['token_level_1']);
unset($_POST);
} }
} }
else if (isset($_POST['token_level_2']) && isset($_SESSION['token_level_2'])) else if (isset($_POST['token_level_2']) && isset($_SESSION['token_level_2']))
@ -193,8 +193,8 @@ else if (isset($_POST['token_level_2']) && isset($_SESSION['token_level_2']))
//print 'session_token_level_2='.$_SESSION['token_level_2'].'<br>'; //print 'session_token_level_2='.$_SESSION['token_level_2'].'<br>';
if ($_POST['token_level_2'] != $_SESSION['token_level_2']) if ($_POST['token_level_2'] != $_SESSION['token_level_2'])
{ {
unset($_POST);
dol_syslog("Invalid token_level_2 in ".$_SERVER['HTTP_REFERER'].", action=".$_POST['action'].", _POST['token_level_2']=".$_POST['token_level_2'].", _SESSION['token_level_2']=".$_SESSION['token_level_2']); dol_syslog("Invalid token_level_2 in ".$_SERVER['HTTP_REFERER'].", action=".$_POST['action'].", _POST['token_level_2']=".$_POST['token_level_2'].", _SESSION['token_level_2']=".$_SESSION['token_level_2']);
unset($_POST);
} }
} }