The way this now works is, if csrf is enabled: * Any new or existing template can have csrf protection by adding the hidden input ctoken that's in this batch to its form, removes any logic in templates * Page controllers that already exist have been updated, new ones only require checking if csrf is enabled and valid |
||
|---|---|---|
| .. | ||
| change.inc.php | ||
| reset.inc.php | ||