Security measures (#331)

* Security measures

* Update CHANGELOG.md
This commit is contained in:
Roman Kelesidis 2023-11-18 10:26:56 +07:00 committed by GitHub
parent 8183a11d76
commit 46037cee9b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 7 additions and 1 deletions

View File

@ -6,6 +6,7 @@
**Merged pull requests:** **Merged pull requests:**
- Release v2.1.5-2024.05-alpha4 🎉 - Release v2.1.5-2024.05-alpha4 🎉
- Security measures [\#331](https://github.com/torrentpier/torrentpier-lts/pull/331) ([belomaxorka](https://github.com/belomaxorka), [kovalensky](https://github.com/kovalensky))
- Some other changes / improvements - Some other changes / improvements
## [v2.1.5-2024.05-alpha3 [Final v2]](https://github.com/torrentpier/torrentpier-lts/tree/v2.1.5-2024.05-alpha3) (2024-06-04) ## [v2.1.5-2024.05-alpha3 [Final v2]](https://github.com/torrentpier/torrentpier-lts/tree/v2.1.5-2024.05-alpha3) (2024-06-04)

View File

@ -668,6 +668,7 @@ if ($userdata['user_level'] == GROUP_MEMBER || IS_AM)
} }
} }
$page_title = '';
$hidden_form_fields = '<input type="hidden" name="mode" value="' . $mode . '" />'; $hidden_form_fields = '<input type="hidden" name="mode" value="' . $mode . '" />';
switch( $mode ) switch( $mode )

View File

@ -1285,7 +1285,7 @@ else if ( $submit || $refresh || $mode != '' )
$template->assign_block_vars('switch_privmsg', array()); $template->assign_block_vars('switch_privmsg', array());
$template->assign_var('POSTING_USERNAME'); $template->assign_var('POSTING_USERNAME');
$post_a = '&nbsp;'; $post_a = false;
if ( $mode == 'post' ) if ( $mode == 'post' )
{ {
$post_a = $lang['SEND_A_NEW_MESSAGE']; $post_a = $lang['SEND_A_NEW_MESSAGE'];
@ -1299,6 +1299,10 @@ else if ( $submit || $refresh || $mode != '' )
{ {
$post_a = $lang['EDIT_MESSAGE']; $post_a = $lang['EDIT_MESSAGE'];
} }
else
{
pm_die($lang['NONE_SELECTED']);
}
$s_hidden_fields = '<input type="hidden" name="folder" value="' . $folder . '" />'; $s_hidden_fields = '<input type="hidden" name="folder" value="' . $folder . '" />';
$s_hidden_fields .= '<input type="hidden" name="mode" value="' . $mode . '" />'; $s_hidden_fields .= '<input type="hidden" name="mode" value="' . $mode . '" />';