aboutsummaryrefslogtreecommitdiffstats
path: root/view/theme/diabook-aerith/admin_users.tpl
diff options
context:
space:
mode:
authorSimon L'nu <simon.lnu@gmail.com>2012-04-20 05:52:08 -0400
committerSimon L'nu <simon.lnu@gmail.com>2012-04-20 05:52:08 -0400
commit1c88a7ef5ded0a5e58a554482d2c1fbeb78c2ef0 (patch)
treea5646997bfa930bc7e15db200b5de4e2eacc44b1 /view/theme/diabook-aerith/admin_users.tpl
parent83683b516ec058d0e5fdd0d4a1defbd22a60c322 (diff)
parent3bb785fdad0b1636ac5094a051e291b0f33e0f45 (diff)
downloadvolse-hubzilla-1c88a7ef5ded0a5e58a554482d2c1fbeb78c2ef0.tar.gz
volse-hubzilla-1c88a7ef5ded0a5e58a554482d2c1fbeb78c2ef0.tar.bz2
volse-hubzilla-1c88a7ef5ded0a5e58a554482d2c1fbeb78c2ef0.zip
Merge branch 'master', remote-tracking branch 'remotes/upstream/master'
* remotes/upstream/master: XSRF protection and PHPdoc for mod/admin.php XSRF protection and PHPdoc for mod/admin.php * master:
Diffstat (limited to 'view/theme/diabook-aerith/admin_users.tpl')
-rw-r--r--view/theme/diabook-aerith/admin_users.tpl7
1 files changed, 4 insertions, 3 deletions
diff --git a/view/theme/diabook-aerith/admin_users.tpl b/view/theme/diabook-aerith/admin_users.tpl
index 40f94f5fe..a03573aac 100644
--- a/view/theme/diabook-aerith/admin_users.tpl
+++ b/view/theme/diabook-aerith/admin_users.tpl
@@ -14,7 +14,8 @@
<h1>$title - $page</h1>
<form action="$baseurl/admin/users" method="post">
-
+ <input type='hidden' name='form_security_token' value='$form_security_token'>
+
<h3>$h_pending</h3>
{{ if $pending }}
<table id='pending'>
@@ -72,8 +73,8 @@
<td class='login_date'>$u.page-flags</td>
<td class="checkbox"><input type="checkbox" class="users_ckbx" id="id_user_$u.uid" name="user[]" value="$u.uid"/></td>
<td class="tools" style="width:60px;">
- <a href="$baseurl/admin/users/block/$u.uid" title='{{ if $u.blocked }}$unblock{{ else }}$block{{ endif }}'><span class='icon block {{ if $u.blocked==0 }}dim{{ endif }}'></span></a>
- <a href="$baseurl/admin/users/delete/$u.uid" title='$delete' onclick="return confirm_delete('$u.name')"><span class='icon ad_drop'></span></a>
+ <a href="$baseurl/admin/users/block/$u.uid?t=$form_security_token" title='{{ if $u.blocked }}$unblock{{ else }}$block{{ endif }}'><span class='icon block {{ if $u.blocked==0 }}dim{{ endif }}'></span></a>
+ <a href="$baseurl/admin/users/delete/$u.uid?t=$form_security_token" title='$delete' onclick="return confirm_delete('$u.name')"><span class='icon ad_drop'></span></a>
</td>
</tr>
{{ endfor }}