mirror/php-phpbb
1
0
Fork 0
mirror of https://github.com/phpbb/phpbb.git synced 2025-05-31 19:49:20 +02:00
Code Issues Releases Wiki Activity

[ticket/security/208] Add form key to password reset form

Browse Source 
SECURITY-208
This commit is contained in:
Marc Alexander 2017-06-18 17:39:16 +02:00
parent 1c4f49249f
commit 41df4d3c4c
No known key found for this signature in database
GPG Key ID: 50E0D2423696F995
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
phpBB/includes/ucp/ucp_remind.php
View File

@ -41,8 +41,15 @@ class ucp_remind
$email = strtolower(request_var('email', ''));
$submit = (isset($_POST['submit'])) ? true : false;
add_form_key('ucp_remind');
if ($submit)
{
if (!check_form_key('ucp_remind'))
{
trigger_error('FORM_INVALID');
}
$sql_array = array(
'SELECT' => 'user_id, username, user_permissions, user_email, user_jabber, user_notify_type, user_type, user_lang, user_inactive_reason',
'FROM' => array(USERS_TABLE => 'u'),