Changeset 1611

Timestamp:

08/06/08 07:37:28 (4 months ago)

Author:

misja

Message:

Applied attachment:ticket:381:userdetails.diff

Files:

• devel/mod/users/lib/userdetails_actions.php (modified) (1 diff)
• devel/mod/users/lib/userdetails_edit.php (modified) (2 diffs)

devel/mod/users/lib/userdetails_actions.php

@@ -41 +41 @@
-    case "userdetails:update":
-        
+      if (!elggform_key_check(optional_param('form_key'), 'userdetails:update')) return; 
-        $usertype = user_type($page_owner);
-        

devel/mod/users/lib/userdetails_edit.php

@@ -184 +184 @@
-
-    $save = __gettext("Save");
+
+    $form_key = elggform_key_get('userdetails:update');
-    
-    $body .= <<< END
@@ -199 +201 @@
-    </p>
-    
+    <input type="hidden" name="form_key" value="$form_key" />
-</form>
-