Added CSRF protection

aimeos · Jan 24, 2016 · 5d6c40e · 5d6c40e
1 parent cb3ffe6
commit 5d6c40e
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/admin/jqadm/templates/product/list-default.php b/admin/jqadm/templates/product/list-default.php
@@ -209,6 +209,7 @@
 						href="<?php echo $enc->attr( $this->url( $copyTarget, $copyCntl, $copyAction, array( 'id' => $id ) + $params, array(), $copyConfig ) ); ?>"
 						aria-label="<?php echo $enc->attr( $this->translate( 'admin', 'Copy' ) ); ?>"></a><!--
 					--><form class="delete" action="<?php echo $enc->attr( $this->url( $delTarget, $delCntl, $delAction, array( 'id' => $id ) + $params, array(), $delConfig ) ); ?>" method="POST"><!--
+						--><?php echo $this->csrf()->formfield(); ?><!--
 						--><input type="hidden" name="resource" value="<?php echo $enc->attr( $this->value( $params, 'resource' ) ); ?>" /><!--
 						--><input type="hidden" name="id" value="<?php echo $enc->attr( $id ); ?>" /><!--
 						--><button class="btn btn-danger fa fa-trash" aria-label="<?php echo $enc->attr( $this->translate( 'admin', 'Delete' ) ); ?>"><!--