CSRF protection not needed for bugnote_stats_inc

mantisbt · Jul 6, 2009 · b59bfe4 · b59bfe4
1 parent d43b14d
commit b59bfe4
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/bugnote_stats_inc.php b/bugnote_stats_inc.php
@@ -62,6 +62,7 @@
 	$f_get_bugnote_stats_button = gpc_get_string('get_bugnote_stats_button', '');
 ?>
 <form method="post" action="<?php echo $_SERVER['SCRIPT_NAME'] ?>">
+<?php # CSRF protection not required here - form does not result in modifications ?>
 <input type="hidden" name="bug_id" value="<?php echo $f_bug_id ?>" />
 <table border=0 class="width100" cellspacing="0">
 <tr>