Fix add set_paid as sensitive action

This commit is contained in:
Laurent Destailleur 2021-09-18 22:09:55 +02:00
parent 0749d01c5a
commit b46f4028c4
2 changed files with 2 additions and 2 deletions

View File

@ -876,7 +876,7 @@ if (!empty($id) && $action != 'edit') {
// Classify 'paid' // Classify 'paid'
if ($object->statut == $object::STATUS_VALIDATED && round($remaintopay) == 0 && $object->paid == 0 && $user->rights->don->creer) { if ($object->statut == $object::STATUS_VALIDATED && round($remaintopay) == 0 && $object->paid == 0 && $user->rights->don->creer) {
print '<div class="inline-block divButAction"><a class="butAction" href="'.$_SERVER["PHP_SELF"].'?rowid='.$object->id.'&action=set_paid">'.$langs->trans("ClassifyPaid")."</a></div>"; print '<div class="inline-block divButAction"><a class="butAction" href="'.$_SERVER["PHP_SELF"].'?rowid='.$object->id.'&action=set_paid&token='.newToken().'">'.$langs->trans("ClassifyPaid")."</a></div>";
} }
// Delete // Delete

View File

@ -466,7 +466,7 @@ if ((!defined('NOCSRFCHECK') && empty($dolibarr_nocsrfcheck) && !empty($conf->gl
'activate', 'add', 'addrights', 'addtimespent', 'activate', 'add', 'addrights', 'addtimespent',
'doprev', 'donext', 'dvprev', 'dvnext', 'doprev', 'donext', 'dvprev', 'dvnext',
'install', 'install',
'setpricelevel', 'setpricelevel', 'set_paid',
'update' 'update'
); );
$sensitiveget = false; $sensitiveget = false;