Fix: ajout d'un jeton alatoire dans les requetes POST

This commit is contained in:
Regis Houssin
2009-05-15 14:41:19 +00:00
parent 8efffebe2e
commit b1e630a3fa
29 changed files with 47 additions and 0 deletions

View File

@@ -121,6 +121,7 @@ if ($id > 0 || ! empty($ref))
if ($_GET["action"] == 'edit')
{
print '<form method="post" action="'.$_SERVER["PHP_SELF"].'?id='.$commande->id.'">';
print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
print '<input type="hidden" name="action" value="update">';
print '<textarea name="note_public" cols="80" rows="8">'.$commande->note_public."</textarea><br>";
}