Project

General

Profile

« Previous | Next » 

Revision 1357

Added by FrankH almost 14 years ago

Security fixes

View differences:

settings2.php
30 30
require_once(WB_PATH.'/framework/class.admin.php');
31 31
$admin = new admin('Pages', 'pages_settings');
32 32

  
33
if (!$admin->checkFTAN())
34
{
35
	$admin->print_error($MESSAGE['PAGES_NOT_SAVED'],'index.php');
36
	exit();
37
}
38

  
33 39
// Include the WB functions file
34 40
require_once(WB_PATH.'/framework/functions.php');
35 41

  
......
199 205
$sql .= 'WHERE `page_id` = '.$page_id;
200 206
$database->query($sql);
201 207

  
202
$target_url = ADMIN_URL.'/pages/settings.php?page_id='.$page_id;
208
$ftan2 = $admin->getFTAN(2);
209
$target_url = ADMIN_URL."/pages/settings.php?page_id=$page_id&$ftan2";
203 210
if($database->is_error())
204 211
{
205 212
	$admin->print_error($database->get_error(), $target_url );
......
296 303
/* END page "access file" code */
297 304

  
298 305
$pagetree_url = ADMIN_URL.'/pages/index.php';
299
$target_url = ADMIN_URL.'/pages/settings.php?page_id='.$page_id;
306
$ftan2 = $admin->getFTAN(2);
307
$target_url = ADMIN_URL."/pages/settings.php?page_id=$page_id&$ftan2";
300 308
// Check if there is a db error, otherwise say successful
301 309
if($database->is_error())
302 310
{

Also available in: Unified diff