riyyi/website
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Controller: Add CSRF token validation to development toggle

Browse Source
This commit is contained in:
Riyyi
2021-08-30 01:02:50 +02:00
parent d50443b10a
commit 9a99c31d47
3 changed files with 37 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/controllers/CacheController.php
+2 -1
View File
@@ -21,6 +21,7 @@ class CacheController extends PageController {
$this->router->service()->config = $config;
$this->router->service()->csrfToken = Session::token();
$this->router->service()->purgeUrl = $this->url . '/purge';
$this->router->service()->toggleUrl = $this->url . '/toggle';
parent::view();
}
@@ -81,7 +82,7 @@ class CacheController extends PageController {
public function toggleAction(): void
{
if (Config::c('CLOUDFLARE_ENABLED') != '1') {
if (!$this->validatePostRequest()) {
return;
}
app/views/admin/cache.php
+1
View File
@@ -75,6 +75,7 @@ use \App\Classes\Config;
<div class="col-3 col-md-2 col-lg-2 col-xl-2">
<div class="d-flex justify-content-center">
<input type="checkbox" id="development-mode"
data-href="<?= $this->toggleUrl; ?>" data-token="<?= $this->csrfToken; ?>"
<?= $this->config['CLOUDFLARE_DEVELOPMENT_MODE_ENABLED'] ? 'checked' : ''; ?>>
</div>
</div>