From e9bac1e88c8183d85c5ceaea6dc38a6fdae01bbd Mon Sep 17 00:00:00 2001
From: Marcello Coutinho <marcellocoutinho@gmail.com>
Date: Wed, 17 Apr 2013 18:29:43 -0300
Subject: lightsquid - include csrf_get_tokens function call on sqstat.php

---
 config/lightsquid/sqstat.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

(limited to 'config')

diff --git a/config/lightsquid/sqstat.php b/config/lightsquid/sqstat.php
index a56b604a..7b12b970 100644
--- a/config/lightsquid/sqstat.php
+++ b/config/lightsquid/sqstat.php
@@ -61,7 +61,7 @@ if ($_REQUEST['getactivity'])
 $pgtitle = "Proxy Squid: Realtime stat (sqstat)";
 
 require_once("head.inc");
-
+$csrf_token= csrf_get_tokens();
 ?>
 
 <link   href="sqstat.css" rel="stylesheet" type="text/css"/>
@@ -79,7 +79,7 @@ function el(id) {
 
 function getactivity(action) {
     var url  = "<?php echo ($_SERVER["PHP_SELF"]); ?>";
-    var pars = "getactivity=yes";
+    var pars = "getactivity=yes" + "<? echo '&__csrf_magic='.$csrf_token ?>";
 
     var myAjax = new Ajax.Request( url,
             {
@@ -414,4 +414,4 @@ function sqstat_get_real_interface_address($iface)
 	return array($ip, long2ip(hexdec($netmask)));
 }
 
-?>
\ No newline at end of file
+?>
-- 
cgit v1.2.3