Navigation

Changeset 13489

Timestamp:

11/29/08 16:06:34 (4 years ago)

Author:

fabien

Message:

[1.2] fixed CSRF problem with CRUD and admin generator (closes #4915)

Files:

r12501	r13489
1	1	public function executeBatch(sfWebRequest $request)
2	2	{
	3	$request->checkCSRFProtection();
	4
3	5	if (!$ids = $request->getParameter('ids'))
4	6	{

r12510	r13489
1	1	public function executeDelete(sfWebRequest $request)
2	2	{
	3	$request->checkCSRFProtection();
	4
3	5	$this->dispatcher->notify(new sfEvent($this, 'admin.delete_object', array('object' => $this->getRoute()->getObject())));
4	6

r13120	r13489
8	8	<?php endforeach; ?>
9	9	</select>
	10	<?php $form = new sfForm(); if ($form->isCSRFProtected()): ?>
	11	<input type="hidden" name="<?php echo $form->getCSRFFieldName() ?>" value="<?php echo $form->getCSRFToken() ?>" />
	12	<?php endif; ?>
10	13	<input type="submit" value="[?php echo __('go', array(), 'sf_admin') ?]" />
11	14	</li>

r12480	r13489
1	1	public function executeDelete(sfWebRequest $request)
2	2	{
	3	$request->checkCSRFProtection();
	4
3	5	<?php if (isset($this->params['with_propel_route']) && $this->params['with_propel_route']): ?>
4	6	$this->getRoute()->getObject()->delete();

r12768	r13489
221	221	info('delete')->
222	222	get(sprintf('/%s/3/edit', $this->urlPrefix))->
223
224		click('Delete', array(), array('method' => 'delete'))->
	223	click('Delete', array(), array('method' => 'delete', '_with_csrf' => true))->
225	224	isStatusCode(302)->
226	225	isRequestParameter('module', $this->urlPrefix)->

	About Installation Documentation Plugins Community Blog Development

Development Changeset 13489
You must first sign up to be able to contribute.