Pi-Hole/web
1
0
Fork 0
mirror of https://github.com/pi-hole/web.git synced 2026-04-24 10:50:23 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #466 from pi-hole/fix/csrf-security

Browse Source 
Add CSRF token
This commit is contained in:
Mcat12
2017-04-06 16:22:18 -04:00
committed by GitHub
parent acc83345fd 3d0a3506d4
commit 52a5fb62ff
6 changed files with 44 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
scripts/pi-hole/php/savesettings.php
View File

@@ -159,6 +159,9 @@ function readAdlists()
if(isset($_POST["field"]))
{
// Handle CSRF
check_csrf(isset($_POST["token"]) ? $_POST["token"] : "");
// Process request
switch ($_POST["field"]) {
// Set DNS server