mirror/php-adminer
1
0
Fork 0
mirror of https://github.com/vrana/adminer.git synced 2025-08-07 15:16:44 +02:00
Code Issues Releases Wiki Activity

Update comment

Browse Source
This commit is contained in:
Jakub Vrana
2025-04-06 16:41:25 +02:00
parent 9e0aa1b91a
commit 833fa22e3f
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
plugins/config.php
View File

@@ -12,7 +12,7 @@ class AdminerConfig extends Adminer\Plugin {
static $called; // this function is called from page_header() and it also calls page_header()
if (isset($_GET["config"]) && !$called && Adminer\connection()) {
$called = true;
if ($_GET["config"]) { // using $_GET allows sharing links between devices but doesn't protect against CSRF
if ($_GET["config"]) { // using $_GET allows sharing links between devices but doesn't protect against same-site RF; CSRF is protected by SameSite cookies
Adminer\save_settings($_GET["config"], "adminer_config");
Adminer\redirect(null, $this->lang('Configuration saved.'));
}