mirror of
https://github.com/phpbb/phpbb.git
synced 2025-08-16 13:44:12 +02:00
Ok, here comes a big one. Poor updater. Also requires testing.
#i91 #i92 #i93 #i94 #i95 #i96 git-svn-id: file:///svn/phpbb/trunk@8120 89ea8834-ac86-4346-8a33-228a782c2dd0
This commit is contained in:
@@ -35,6 +35,9 @@ class acp_permission_roles
|
||||
$action = request_var('action', '');
|
||||
$action = (isset($_POST['add'])) ? 'add' : $action;
|
||||
|
||||
$form_name = 'acp_permissions';
|
||||
add_form_key($form_name);
|
||||
|
||||
switch ($mode)
|
||||
{
|
||||
case 'admin_roles':
|
||||
@@ -134,6 +137,11 @@ class acp_permission_roles
|
||||
|
||||
case 'add':
|
||||
|
||||
if(!check_form_key($form_name))
|
||||
{
|
||||
trigger_error($user->lang['FORM_INVALID']. adm_back_link($this->u_action), E_USER_WARNING);
|
||||
}
|
||||
|
||||
$role_name = utf8_normalize_nfc(request_var('role_name', '', true));
|
||||
$role_description = utf8_normalize_nfc(request_var('role_description', '', true));
|
||||
$auth_settings = request_var('setting', array('' => 0));
|
||||
|
Reference in New Issue
Block a user