The way this now works is, if csrf is enabled: * Any new or existing template can have csrf protection by adding the hidden input ctoken that's in this batch to its form, removes any logic in templates * Page controllers that already exist have been updated, new ones only require checking if csrf is enabled and valid |
||
|---|---|---|
| .. | ||
| admin_settings.inc.php | ||
| error_codes.inc.php | ||
| global.inc.dist.php | ||
| memcache_keys.inc.php | ||