mirror of
https://github.com/vrana/adminer.git
synced 2025-08-08 07:36:44 +02:00
Update comment
This commit is contained in:
@@ -12,7 +12,7 @@ class AdminerConfig extends Adminer\Plugin {
|
|||||||
static $called; // this function is called from page_header() and it also calls page_header()
|
static $called; // this function is called from page_header() and it also calls page_header()
|
||||||
if (isset($_GET["config"]) && !$called && Adminer\connection()) {
|
if (isset($_GET["config"]) && !$called && Adminer\connection()) {
|
||||||
$called = true;
|
$called = true;
|
||||||
if ($_GET["config"]) { // using $_GET allows sharing links between devices but doesn't protect against CSRF
|
if ($_GET["config"]) { // using $_GET allows sharing links between devices but doesn't protect against same-site RF; CSRF is protected by SameSite cookies
|
||||||
Adminer\save_settings($_GET["config"], "adminer_config");
|
Adminer\save_settings($_GET["config"], "adminer_config");
|
||||||
Adminer\redirect(null, $this->lang('Configuration saved.'));
|
Adminer\redirect(null, $this->lang('Configuration saved.'));
|
||||||
}
|
}
|
||||||
|
Reference in New Issue
Block a user