The way this now works is, if csrf is enabled: * Any new or existing template can have csrf protection by adding the hidden input ctoken that's in this batch to its form, removes any logic in templates * Page controllers that already exist have been updated, new ones only require checking if csrf is enabled and valid |
||
|---|---|---|
| .. | ||
| confirm.inc.php | ||
| edit.inc.php | ||
| invitations.inc.php | ||
| notifications.inc.php | ||
| qrcode.inc.php | ||
| reset_failed.inc.php | ||
| transactions.inc.php | ||
| unlock.inc.php | ||
| workers.inc.php | ||