nestict/mitrobill
1
0
Fork 0
forked from kevinowino869/mitrobill
Code Pull Requests Activity

CSRF added to customer acounts update

Browse Source
This commit is contained in:
Focuslinkstech
2024-10-10 15:48:32 +01:00
committed by GitHub
parent 6be0da383c
commit 6e5450d104
5 changed files with 38 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
ui/ui/customer/change-password.tpl
View File

@ -7,6 +7,7 @@
<div class="panel-heading">{Lang::T('Change Password')}</div>
<div class="panel-body">
<form class="form-horizontal" method="post" role="form" action="{$_url}accounts/change-password-post">
<input type="hidden" name="csrf_token" value="{$csrf_token}">
<div class="form-group">
<label class="col-md-2 control-label">{Lang::T('Current Password')}</label>
<div class="col-md-6">

2
ui/ui/customer/email-update.tpl
View File

@ -19,6 +19,7 @@
</div>
</div>
<form method="post" role="form" action="{$_url}accounts/email-update-otp">
<input type="hidden" name="csrf_token" value="{$csrf_token}">
<div class="form-group">
<label class="col-md-2 control-label">{Lang::T('New Email')}</label>
<div class="col-md-6">
@ -34,6 +35,7 @@
</div>
</form>
<form method="post" role="form" action="{$_url}accounts/email-update-post">
<input type="hidden" name="csrf_token" value="{$csrf_token}">
<!-- Form 2 -->
<div class="form-group">
<label class="col-md-2 control-label">{Lang::T('OTP')}</label>

2
ui/ui/customer/phone-update.tpl
View File

@ -19,6 +19,7 @@
</div>
</div>
<form method="post" role="form" action="{$_url}accounts/phone-update-otp">
<input type="hidden" name="csrf_token" value="{$csrf_token}">
<div class="form-group">
<label class="col-md-2 control-label">{Lang::T('New Number')}</label>
<div class="col-md-6">
@ -34,6 +35,7 @@
</div>
</form>
<form method="post" role="form" action="{$_url}accounts/phone-update-post">
<input type="hidden" name="csrf_token" value="{$csrf_token}">
<!-- Form 2 -->
<div class="form-group">
<label class="col-md-2 control-label">{Lang::T('OTP')}</label>

1
ui/ui/customer/profile.tpl
View File

@ -7,6 +7,7 @@
<div class="panel-heading">{Lang::T('Data Change')}</div>
<div class="panel-body">
<form class="form-horizontal" method="post" role="form" action="{$_url}accounts/edit-profile-post">
<input type="hidden" name="csrf_token" value="{$csrf_token}">
<input type="hidden" name="id" value="{$_user['id']}">
<div class="form-group">
<label class="col-md-2 control-label">{Lang::T('Username')}</label>