From 9a746ea4845f198e30fc86cea52faf68a91ecbe6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 4 Sep 2021 01:23:24 +0200
Subject: [PATCH] Adding token for /logout/

---
 web/templates/admin/list_search.html      | 2 +-
 web/templates/admin/list_server_info.html | 2 +-
 web/templates/admin/list_user.html        | 2 +-
 web/templates/admin/list_weblog.html      | 2 +-
 web/templates/admin/panel.html            | 2 +-
 web/templates/user/list_search.html       | 2 +-
 web/templates/user/list_user.html         | 2 +-
 web/templates/user/panel.html             | 2 +-
 8 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/web/templates/admin/list_search.html b/web/templates/admin/list_search.html
index 13aef07f..4483920f 100644
--- a/web/templates/admin/list_search.html
+++ b/web/templates/admin/list_search.html
@@ -71,7 +71,7 @@
               if ($value['USER'] != $user && $value['KEY'] == 'ACCOUNT') {
                 if ($key == $user) {
             ?>
-                  <div class="actions-panel__col actions-panel__loginas shortcut-l" key-action="href"><a href="/logout"><?=__('logout')?> <i></i></a><span class="shortcut">&nbsp;L</span></div>
+                  <div class="actions-panel__col actions-panel__loginas shortcut-l" key-action="href"><a href="/logout/?token=<?=$_SESSION['token']?>"><?=__('logout')?> <i></i></a><span class="shortcut">&nbsp;L</span></div>
 <?php
                 } else {
 ?>
diff --git a/web/templates/admin/list_server_info.html b/web/templates/admin/list_server_info.html
index eaaf34cd..7a131572 100644
--- a/web/templates/admin/list_server_info.html
+++ b/web/templates/admin/list_server_info.html
@@ -33,7 +33,7 @@
       <!-- /.l-menu -->
       <div class="l-profile">
         <a class="l-profile__username" href="/edit/user/?user=<?php echo $user; ?>"><?=$user?></a>
-        <a class="l-profile__logout" href="/logout/"> <?=__('Log out')?> </a>
+        <a class="l-profile__logout" href="/logout/?token=<?=$_SESSION['token']?>"> <?=__('Log out')?> </a>
       </div>
       <!-- /.l-profile -->
     </div>
diff --git a/web/templates/admin/list_user.html b/web/templates/admin/list_user.html
index 7dd47577..4ad3daec 100644
--- a/web/templates/admin/list_user.html
+++ b/web/templates/admin/list_user.html
@@ -94,7 +94,7 @@ sort-bandwidth="<?=$data[$key]['U_BANDWIDTH']?>" sort-disk="<?=$data[$key]['U_DI
             <?
               if ($key == $user) {
             ?>
-                <div class="actions-panel__col actions-panel__loginas shortcut-l" key-action="href"><a href="/logout"><?=__('logout')?> <i></i></a><span class="shortcut">&nbsp;L</span></div>
+                <div class="actions-panel__col actions-panel__loginas shortcut-l" key-action="href"><a href="/logout/?token=<?=$_SESSION['token']?>"><?=__('logout')?> <i></i></a><span class="shortcut">&nbsp;L</span></div>
 <?php
               } else {
 ?>
diff --git a/web/templates/admin/list_weblog.html b/web/templates/admin/list_weblog.html
index 0627c477..1ca837e2 100644
--- a/web/templates/admin/list_weblog.html
+++ b/web/templates/admin/list_weblog.html
@@ -29,7 +29,7 @@
       <!-- /.l-menu -->
       <div class="l-profile">
         <a class="l-profile__username" href="/edit/user/?user=<?php echo $user; ?>"><?=$user?></a>
-        <a class="l-profile__logout" href="/logout/"> <?=__('Log out')?> </a>
+        <a class="l-profile__logout" href="/logout/?token=<?=$_SESSION['token']?>"> <?=__('Log out')?> </a>
       </div>
       <!-- /.l-profile -->
     </div>
diff --git a/web/templates/admin/panel.html b/web/templates/admin/panel.html
index 80bfdaf1..b4534ccd 100644
--- a/web/templates/admin/panel.html
+++ b/web/templates/admin/panel.html
@@ -26,7 +26,7 @@
       <div class="l-profile noselect">
         <a class="l-profile__notifications <? if($panel[$user]['NOTIFICATIONS'] == 'yes') echo " updates"; ?>">&nbsp;</a>
         <a class="l-profile__username" href="/edit/user/?user=<?php echo $user; ?>"><?=$user?></a>
-        <a class="l-profile__logout" href="/logout/"> <?=__('Log out')?> </a>
+        <a class="l-profile__logout" href="/logout/?token=<?=$_SESSION['token']?>"> <?=__('Log out')?> </a>
       </div>
       <!-- /.l-profile -->
     </div>
diff --git a/web/templates/user/list_search.html b/web/templates/user/list_search.html
index a9198d1d..abe3a768 100644
--- a/web/templates/user/list_search.html
+++ b/web/templates/user/list_search.html
@@ -70,7 +70,7 @@
               if ($value['USER'] != $user && $value['KEY'] == 'ACCOUNT') {
                 if ($key == $user) {
             ?>
-                  <div class="actions-panel__col actions-panel__loginas shortcut-l" key-action="href"><a href="/logout"><?=__('logout')?> <i></i></a><span class="shortcut">&nbsp;L</span></div>
+                  <div class="actions-panel__col actions-panel__loginas shortcut-l" key-action="href"><a href="/logout/?token=<?=$_SESSION['token']?>"><?=__('logout')?> <i></i></a><span class="shortcut">&nbsp;L</span></div>
 <?php
                 } else {
  ?>
diff --git a/web/templates/user/list_user.html b/web/templates/user/list_user.html
index 85ed64c3..e6645900 100644
--- a/web/templates/user/list_user.html
+++ b/web/templates/user/list_user.html
@@ -89,7 +89,7 @@ sort-disk="<?=$data[$key]['U_DISK']?>" sort-star="<?if($_SESSION['favourites']['
             <?
               if ($key == $user) {
             ?>
-                <div class="actions-panel__col actions-panel__loginas shortcut-l" key-action="href"><a href="/logout"><?=__('logout')?> <i></i></a><span class="shortcut">&nbsp;L</span></div>
+                <div class="actions-panel__col actions-panel__loginas shortcut-l" key-action="href"><a href="/logout/?token=<?=$_SESSION['token']?>"><?=__('logout')?> <i></i></a><span class="shortcut">&nbsp;L</span></div>
 <?php
               } else {
 ?>
diff --git a/web/templates/user/panel.html b/web/templates/user/panel.html
index dfb544c9..81cd8358 100644
--- a/web/templates/user/panel.html
+++ b/web/templates/user/panel.html
@@ -20,7 +20,7 @@
       <div class="l-profile">
         <a class="l-profile__notifications <? if($panel[$user]['NOTIFICATIONS'] == 'yes') echo " updates"; ?>">&nbsp;</a>
         <a class="l-profile__username" href="/edit/user/?user=<?php echo $user; ?>"><? if(($_SESSION['user'] == 'admin') && ($user != 'admin')) echo 'admin → ' ?><?=$user?></a>
-        <a class="l-profile__logout" href="/logout/"> <?=__('Log out')?> </a>
+        <a class="l-profile__logout" href="/logout/?token=<?=$_SESSION['token']?>"> <?=__('Log out')?> </a>
       </div>
       <!-- /.l-profile -->
     </div>