diff options
author | Harald Eilertsen <haraldei@anduin.net> | 2024-11-02 14:42:00 +0000 |
---|---|---|
committer | Mario <mario@mariovavti.com> | 2024-11-02 14:42:00 +0000 |
commit | 38c947590e81fbb00e315e1902eba8dd6dbdd0ec (patch) | |
tree | b92d257beb82024c03f21f783c37169db9ec64c9 /view/tpl/admin_account_edit.tpl | |
parent | 541a0f6476ebf178ac141d09a30f6fca824eebcb (diff) | |
download | volse-hubzilla-38c947590e81fbb00e315e1902eba8dd6dbdd0ec.tar.gz volse-hubzilla-38c947590e81fbb00e315e1902eba8dd6dbdd0ec.tar.bz2 volse-hubzilla-38c947590e81fbb00e315e1902eba8dd6dbdd0ec.zip |
Fix missing CSRF checks in admin/account_edit
Diffstat (limited to 'view/tpl/admin_account_edit.tpl')
-rw-r--r-- | view/tpl/admin_account_edit.tpl | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/view/tpl/admin_account_edit.tpl b/view/tpl/admin_account_edit.tpl index 1cbb9af0b..6cc8872ba 100644 --- a/view/tpl/admin_account_edit.tpl +++ b/view/tpl/admin_account_edit.tpl @@ -5,6 +5,7 @@ <form action="admin/account_edit/{{$account.account_id}}" method="post" > <input type="hidden" name="aid" value="{{$account.account_id}}" /> +<input type="hidden" name="security" value="{{$security}}"> {{include file="field_password.tpl" field=$pass1}} {{include file="field_password.tpl" field=$pass2}} |