1
0
mirror of https://git.tt-rss.org/git/tt-rss.git synced 2026-01-08 05:39:15 +00:00

experimental CSRF protection

This commit is contained in:
Andrew Dolgov
2011-12-26 12:02:52 +04:00
parent 036cd3a410
commit 8484ce2258
14 changed files with 106 additions and 9 deletions

View File

@@ -1,6 +1,12 @@
<?php
class Pref_Prefs extends Protected_Handler {
function csrf_ignore($method) {
$csrf_ignored = array("index");
return array_search($method, $csrf_ignored) !== false;
}
function changepassword() {
$old_pw = $_POST["old_password"];