From c2a30bcd31d41ce90146734af3d52073ae1c169a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 29 Aug 2021 00:07:41 +0200
Subject: [PATCH] Preventing CSRF in /edit/file/

---
 web/edit/file/index.php | 10 +---------
 1 file changed, 1 insertion(+), 9 deletions(-)

diff --git a/web/edit/file/index.php b/web/edit/file/index.php
index 9071af3a2..b36a4656f 100644
--- a/web/edit/file/index.php
+++ b/web/edit/file/index.php
@@ -1,15 +1,7 @@
 <?php
 
 // Preventing CSRF
-if ($_SERVER['REQUEST_METHOD']=='POST') {
-    $host_arr=explode(":", $_SERVER['HTTP_HOST']);
-    $hostname=$host_arr[0];
-    $port = $_SERVER['SERVER_PORT'];
-    $expected_http_origin="https://".$hostname.":".$port;
-    if ($_SERVER['HTTP_ORIGIN'] != $expected_http_origin) {
-        die ("Nope.");
-    }
-}
+prevent_post_csrf(true);
 
 include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
 $user = $_SESSION['user'];