Skip to content

Commit d518b3d

Browse files
michieldmarianaballa
authored andcommitted
verify the token on a delete call
(cherry picked from commit 678bd0a)
1 parent 3101068 commit d518b3d

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

public_html/lists/admin/users.php

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -233,6 +233,7 @@
233233
}
234234

235235
if (!empty($delete) && isSuperUser()) {
236+
verifyCsrfGetToken();
236237
// delete the index in delete
237238
$action_result = $GLOBALS['I18N']->get('deleting')." $delete ..\n";
238239
deleteUser($delete);

0 commit comments

Comments
 (0)