Dont use token for manage_proj_edit_page

The destination page does not verify form tokens, so call print_button() with the token parameter OFF. Issue #20242
mantisbt · Mar 7, 2016 · f82565a · f82565a
1 parent c596d45
commit f82565a
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/manage_proj_edit_page.php b/manage_proj_edit_page.php
@@ -619,9 +619,9 @@
 	# You need global or project-specific permissions to remove users
 	#  from this project
 	if( !$f_show_global_users ) {
-		print_button( 'manage_proj_edit_page.php?project_id=' . $f_project_id . '&show_global_users=true', lang_get( 'show_global_users' ) );
+		print_button( 'manage_proj_edit_page.php?project_id=' . $f_project_id . '&show_global_users=true', lang_get( 'show_global_users' ), null, OFF );
 	} else {
-		print_button( 'manage_proj_edit_page.php?project_id=' . $f_project_id, lang_get( 'hide_global_users' ) );
+		print_button( 'manage_proj_edit_page.php?project_id=' . $f_project_id, lang_get( 'hide_global_users' ), null, OFF );
 	}
 
 	if( $t_removable_users_exist ) {