diff options
| author | Marcello Coutinho <marcellocoutinho@gmail.com> | 2013-04-17 18:29:43 -0300 |
|---|---|---|
| committer | Marcello Coutinho <marcellocoutinho@gmail.com> | 2013-04-17 18:29:43 -0300 |
| commit | e9bac1e88c8183d85c5ceaea6dc38a6fdae01bbd (patch) | |
| tree | a555c9455e802d49a3db33eb4b378ff479844a2b | |
| parent | 680583097e877d089119dbcd19ecd6c45248668d (diff) | |
| download | pfsense-packages-e9bac1e88c8183d85c5ceaea6dc38a6fdae01bbd.tar.gz pfsense-packages-e9bac1e88c8183d85c5ceaea6dc38a6fdae01bbd.tar.bz2 pfsense-packages-e9bac1e88c8183d85c5ceaea6dc38a6fdae01bbd.zip | |
lightsquid - include csrf_get_tokens function call on sqstat.php
| -rw-r--r-- | config/lightsquid/sqstat.php | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/config/lightsquid/sqstat.php b/config/lightsquid/sqstat.php index a56b604a..7b12b970 100644 --- a/config/lightsquid/sqstat.php +++ b/config/lightsquid/sqstat.php @@ -61,7 +61,7 @@ if ($_REQUEST['getactivity']) $pgtitle = "Proxy Squid: Realtime stat (sqstat)"; require_once("head.inc"); - +$csrf_token= csrf_get_tokens(); ?> <link href="sqstat.css" rel="stylesheet" type="text/css"/> @@ -79,7 +79,7 @@ function el(id) { function getactivity(action) { var url = "<?php echo ($_SERVER["PHP_SELF"]); ?>"; - var pars = "getactivity=yes"; + var pars = "getactivity=yes" + "<? echo '&__csrf_magic='.$csrf_token ?>"; var myAjax = new Ajax.Request( url, { @@ -414,4 +414,4 @@ function sqstat_get_real_interface_address($iface) return array($ip, long2ip(hexdec($netmask))); } -?>
\ No newline at end of file +?> |