Dev: Fixed issue : Download dir/files via KCFinder

Dev: CRSF token active
LimeSurvey · Jun 17, 2015 · ee717f9 · ee717f9
1 parent d77319c
commit ee717f9
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 2 deletions.
diff --git a/third_party/kcfinder/js/091.menus.js b/third_party/kcfinder/js/091.menus.js
@@ -251,7 +251,7 @@ _.menuFile = function(file, e) {
 
         // DOWNLOAD
         _.menu.addItem("kcact:download", _.label("Download"), function() {
-            $('#menu').html('<form id="downloadForm" method="post" action="' + _.getURL('download') + '"><input type="hidden" name="dir" /><input type="hidden" name="file" /></form>');
+            $('#menu').html('<form id="downloadForm" method="post" action="' + _.getURL('download') + '"><input type="hidden" name="dir" /><input type="hidden" name="file" /><input type="hidden" name="kcfinder_csrftoken" value="' + _.csrftoken + '" /></form>');
             $('#downloadForm input').get(0).value = _.dir;
             $('#downloadForm input').get(1).value = data.name;
             $('#downloadForm').submit();
@@ -586,4 +586,4 @@ _.openClipboard = function() {
             }).width(dlg.width() + _.scrollbarWidth);
         }
     }, 1);
-};
+};
diff --git a/third_party/kcfinder/js/120.misc.js b/third_party/kcfinder/js/120.misc.js
@@ -117,6 +117,9 @@ _.post = function(url, data) {
         else
             html += '<input type="hidden" name="' + $.$.htmlValue(key) + '" value="' + $.$.htmlValue(val) + '" />';
     });
+    if(typeof _.csrftoken!="undefined")
+            html += '<input type="hidden" name="kcfinder_csrftoken" value="' + _.csrftoken + '" />';
+
     html += '</form>';
     $('#menu').html(html).show();
     $('#postForm').get(0).submit();