diff options
| author | Andreas Gohr <andi@splitbrain.org> | 2010-01-17 10:52:59 +0100 |
|---|---|---|
| committer | Andreas Gohr <andi@splitbrain.org> | 2010-01-17 10:52:59 +0100 |
| commit | d7554c0bb25241c1299af28785878d31ad02dbad (patch) | |
| tree | 7b58bfbc69ef58f93ce9a67c67348560aaecc183 /lib/plugins/acl/script.js | |
| parent | 49eb6e38061d744f4a35b78082dce49fa35f79c8 (diff) | |
| download | dokuwiki-d7554c0bb25241c1299af28785878d31ad02dbad.tar.gz dokuwiki-d7554c0bb25241c1299af28785878d31ad02dbad.zip | |
Added CRSF security token checks in ACL plugin
Diffstat (limited to 'lib/plugins/acl/script.js')
| -rw-r--r-- | lib/plugins/acl/script.js | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/lib/plugins/acl/script.js b/lib/plugins/acl/script.js index 7ab83db58..449a3c16a 100644 --- a/lib/plugins/acl/script.js +++ b/lib/plugins/acl/script.js @@ -48,7 +48,8 @@ acl = { data[1] = ajax.encVar('id',frm.elements['id'].value); data[2] = ajax.encVar('acl_t',frm.elements['acl_t'].value); data[3] = ajax.encVar('acl_w',frm.elements['acl_w'].value); - data[4] = ajax.encVar('ajax','info'); + data[4] = ajax.encVar('sectok',frm.elements['sectok'].value); + data[5] = ajax.encVar('ajax','info'); ajax.elementObj = $('acl__info'); |