summaryrefslogtreecommitdiff
path: root/inc/actions.php
diff options
context:
space:
mode:
authorAdrian Lang <lang@cosmocode.de>2010-02-09 10:51:54 +0100
committerAdrian Lang <lang@cosmocode.de>2010-02-09 10:56:46 +0100
commit66d2bed97d77042bdcd15cbeb71f058918c8f614 (patch)
treef0e2636c8f9889be86f101b85fb84d0b32af620d /inc/actions.php
parentc4b04b7f874a6c3f7ab5296aed1c039757183eb7 (diff)
downloadrpg-66d2bed97d77042bdcd15cbeb71f058918c8f614.tar.gz
rpg-66d2bed97d77042bdcd15cbeb71f058918c8f614.tar.bz2
Add security token to subscription manage page
Diffstat (limited to 'inc/actions.php')
-rw-r--r--inc/actions.php2
1 files changed, 1 insertions, 1 deletions
diff --git a/inc/actions.php b/inc/actions.php
index 1fda0584e..b7567bc20 100644
--- a/inc/actions.php
+++ b/inc/actions.php
@@ -571,7 +571,7 @@ function act_subscription($act){
}
// any action given? if not just return and show the subscription page
- if(!$params['action']) return $act;
+ if(!$params['action'] || !checkSecurityToken()) return $act;
// Handle POST data, may throw exception.
trigger_event('ACTION_HANDLE_SUBSCRIBE', $params, 'subscription_handle_post');