3006cb544f
The way this now works is, if csrf is enabled: * Any new or existing template can have csrf protection by adding the hidden input ctoken that's in this batch to its form, removes any logic in templates * Page controllers that already exist have been updated, new ones only require checking if csrf is enabled and valid
47 lines
1.7 KiB
Smarty
47 lines
1.7 KiB
Smarty
<form action="{$smarty.server.SCRIPT_NAME}" method="POST">
|
|
<input type="hidden" name="page" value="{$smarty.request.page|escape}">
|
|
<input type="hidden" name="action" value="{$smarty.request.action|escape}">
|
|
<input type="hidden" name="do" value="sendInvitation">
|
|
<input type="hidden" name="ctoken" value="{$CTOKEN|escape|default:""}" />
|
|
<article class="module width_quarter">
|
|
<header><h3>Invitation</h3></header>
|
|
<div class="module_content">
|
|
<fieldset>
|
|
<label>E-Mail</label>
|
|
<input type="text" name="data[email]" value="{$smarty.request.data.email|escape|default:""}" size="30" />
|
|
</fieldset>
|
|
<fieldset>
|
|
<label>Message</label>
|
|
<textarea name="data[message]" rows="5">{$smarty.request.data.message|escape|default:"Please accept my invitation to this awesome pool."}</textarea>
|
|
</fieldset>
|
|
</div>
|
|
<footer>
|
|
<div class="submit_link">
|
|
<input type="submit" value="Invite" class="alt_btn">
|
|
</div>
|
|
</footer>
|
|
</article>
|
|
</form>
|
|
|
|
<article class="module width_3_quarter">
|
|
<header><h3>Past Invitations</h3></header>
|
|
<table class="tablesorter" cellspacing="0">
|
|
<thead style="font-size:13px;">
|
|
<tr>
|
|
<th>E-Mail</th>
|
|
<th align="center">Sent</th>
|
|
<th align="center">Activated</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody>
|
|
{section name=invite loop=$INVITATIONS}
|
|
<tr>
|
|
<td>{$INVITATIONS[invite].email}</td>
|
|
<td align="center">{$INVITATIONS[invite].time|date_format:"%d/%m/%Y %H:%M:%S"}</td>
|
|
<td align="center"><i class="icon-{if $INVITATIONS[invite].is_activated}ok{else}cancel{/if}"></i></td>
|
|
</tr>
|
|
{/section}
|
|
<tbody>
|
|
</table>
|
|
</article>
|