Skip to content
Snippets Groups Projects
Commit c70b987f authored by Peter Rotich's avatar Peter Rotich
Browse files

Add CSRF protection to missed forms

parent 6dc17855
No related branches found
No related tags found
No related merge requests found
...@@ -614,6 +614,7 @@ if(!$cfg->showNotesInline()) { ?> ...@@ -614,6 +614,7 @@ if(!$cfg->showNotesInline()) { ?>
<a class="close" href="">&times;</a> <a class="close" href="">&times;</a>
<hr/> <hr/>
<form action="tickets.php?id=<?php echo $ticket->getId(); ?>" method="post" id="print-form" name="print-form"> <form action="tickets.php?id=<?php echo $ticket->getId(); ?>" method="post" id="print-form" name="print-form">
<?php csrf_token(); ?>
<input type="hidden" name="a" value="print"> <input type="hidden" name="a" value="print">
<input type="hidden" name="id" value="<?php echo $ticket->getId(); ?>"> <input type="hidden" name="id" value="<?php echo $ticket->getId(); ?>">
<fieldset class="notes"> <fieldset class="notes">
......
...@@ -270,6 +270,7 @@ $negorder=$order=='DESC'?'ASC':'DESC'; //Negate the sorting.. ...@@ -270,6 +270,7 @@ $negorder=$order=='DESC'?'ASC':'DESC'; //Negate the sorting..
<!-- SEARCH FORM START --> <!-- SEARCH FORM START -->
<div id='basic_search'> <div id='basic_search'>
<form action="tickets.php" method="get"> <form action="tickets.php" method="get">
<?php csrf_token(); ?>
<input type="hidden" name="a" value="search"> <input type="hidden" name="a" value="search">
<table> <table>
<tr> <tr>
...@@ -285,6 +286,7 @@ $negorder=$order=='DESC'?'ASC':'DESC'; //Negate the sorting.. ...@@ -285,6 +286,7 @@ $negorder=$order=='DESC'?'ASC':'DESC'; //Negate the sorting..
<div class="clear"></div> <div class="clear"></div>
<div style="margin-bottom:20px"> <div style="margin-bottom:20px">
<form action="tickets.php" method="POST" name='tickets' onSubmit="return checkbox_checker(this,1,0);"> <form action="tickets.php" method="POST" name='tickets' onSubmit="return checkbox_checker(this,1,0);">
<?php csrf_token(); ?>
<a class="refresh" href="<?php echo $_SERVER['REQUEST_URI']; ?>">Refresh</a> <a class="refresh" href="<?php echo $_SERVER['REQUEST_URI']; ?>">Refresh</a>
<input type="hidden" name="a" value="mass_process" > <input type="hidden" name="a" value="mass_process" >
<input type="hidden" name="status" value="<?php echo $status; ?>" > <input type="hidden" name="status" value="<?php echo $status; ?>" >
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment