github/torrentpier
1
0
Fork 0
mirror of https://github.com/torrentpier/torrentpier synced 2025-08-21 22:03:49 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Security measures (#1113)

Browse source
This commit is contained in:
Roman Kelesidis 2023-11-18 10:36:16 +07:00 • committed by GitHub
commit 73b07f2e92
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 20 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

2
posting.php
View file

@ -579,6 +579,8 @@ if ($userdata['user_level'] == GROUP_MEMBER || IS_AM) {
}
}
// Assign posting title & hidden fields
$page_title = '';
$hidden_form_fields = '<input type="hidden" name="mode" value="' . $mode . '" />';
switch ($mode) {

26
privmsg.php
View file

@ -1097,14 +1097,24 @@ if ($mode == 'read') {
$template->assign_block_vars('switch_privmsg', []);
$template->assign_var('POSTING_USERNAME');
$post_a = '&nbsp;';
if ($mode == 'post') {
$post_a = $lang['SEND_A_NEW_MESSAGE'];
} elseif ($mode == 'reply') {
$post_a = $lang['SEND_A_REPLY'];
$mode = 'post';
} elseif ($mode == 'edit') {
$post_a = $lang['EDIT_MESSAGE'];
//
// Assign posting title & hidden fields
//
$post_a = false;
switch ($mode) {
case 'post':
$post_a = $lang['SEND_A_NEW_MESSAGE'];
break;
case 'reply':
$post_a = $lang['SEND_A_REPLY'];
$mode = 'post';
break;
case 'edit':
$post_a = $lang['EDIT_MESSAGE'];
break;
default:
pm_die($lang['NONE_SELECTED']);
break;
}
$s_hidden_fields = '<input type="hidden" name="folder" value="' . $folder . '" />';