postfixadmin

mirror of https://github.com/postfixadmin/postfixadmin.git synced 2026-01-12 22:51:27 +03:00

Go to file

Christian Boltz 52a7df2b3a Add CSRF protection for POST requests

Add the CSRF token to all forms, and validate it when those forms are
submitted.

https://sourceforge.net/p/postfixadmin/bugs/372/



git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1842 a1433add-5e2c-0410-b055-b7f2511e0802

2016-05-20 20:42:04 +00:00

ADDITIONS

fetchmail.pl:

2015-04-04 14:26:21 +00:00

configs

migrate search input field to use search[_], and use list.tpl for alias domains

2015-04-06 14:17:25 +00:00

css

default.css:

2016-05-15 19:20:59 +00:00

debian

refresh debian/patches/db_credentials

2015-09-26 13:11:20 +00:00

DOCUMENTS

POSTFIX_CONF.txt:

2014-07-22 20:36:22 +00:00

images

postfixadmin2.xcf:

2015-04-26 19:25:43 +00:00

languages

cs.lang:

2016-02-16 19:01:27 +00:00

model

Merge pull request #9 from phyrog/master

2016-02-04 22:30:06 +00:00

scripts

reforamt cli commands; update code to php v5 syntax; remove regexp and use filter_var for email validation; use private/protected/public

2016-05-20 19:55:55 +00:00

smarty

update Smarty to 3.1.29

2016-05-20 20:27:29 +00:00

templates

Add CSRF protection for POST requests

2016-05-20 20:42:04 +00:00

tests

this will probably migrate us to phpunit; stupid dev env is misbehaving though so it is hard to test

2011-03-17 22:38:03 +00:00

users

Add CSRF protection for POST requests

2016-05-20 20:42:04 +00:00

VIRTUAL_VACATION

merge patch from 54a77ecb9c - thanks lisergey - encode message body with wide-chars UTF8

2015-10-20 16:06:36 +00:00

backup.php

functions.inc.php:

2013-11-16 00:00:53 +00:00

broadcast-message.php

Add CSRF protection for POST requests

2016-05-20 20:42:04 +00:00

calendar.js

- big merge of Postfixadmin smarty into trunk

2009-11-05 14:55:39 +00:00

CHANGELOG.TXT

update changelog with changes up to r1830

2016-03-27 20:12:49 +00:00

common.php

merge patch from https://sourceforge.net/p/postfixadmin/bugs/347/ (thank you Eugene Grosbein) - explictly set session_cache_limiter to nocache

2015-07-12 12:09:34 +00:00

config.inc.php

config.inc.php:

2016-04-11 23:54:34 +00:00

delete.php

delete.php:

2014-11-02 23:06:13 +00:00

edit.php

Add CSRF protection for POST requests

2016-05-20 20:42:04 +00:00

editactive.php

editactive.php:

2015-04-06 23:09:58 +00:00

functions.inc.php

functions.inc.php:

2016-05-16 09:27:36 +00:00

GPL-LICENSE.TXT

Initial Import in SourceForge

2007-03-24 07:27:00 +00:00

index.php

remove "postfixadmin.com" in comments in lots of files

2013-11-10 15:57:32 +00:00

INSTALL.TXT

remove incorrect advice; see bug report:359

2016-01-12 12:07:25 +00:00

LICENSE.TXT

LICENSE.TXT:

2011-04-24 16:15:21 +00:00

list-virtual.php

use smarty html_options instead of select_options()

2015-12-06 23:27:45 +00:00

list.php

list.php:

2015-03-17 22:22:28 +00:00

2014-05-01 22:52:47 +00:00

main.php

remove "postfixadmin.com" in comments in lots of files

2013-11-10 15:57:32 +00:00

sendmail.php

Add CSRF protection for POST requests

2016-05-20 20:42:04 +00:00

setup.php

Merge pull request #9 from phyrog/master

2016-02-04 22:30:06 +00:00

smarty.inc.php

update Smarty to 3.1.29

2016-05-20 20:27:29 +00:00

upgrade.php

upgrade.php:

2016-04-25 21:20:25 +00:00

vacation.php

Add CSRF protection for POST requests

2016-05-20 20:42:04 +00:00

variables.inc.php

remove "postfixadmin.com" in comments in lots of files

2013-11-10 15:57:32 +00:00

viewlog.php

use smarty html_options instead of select_options()

2015-12-06 23:27:45 +00:00

xmlrpc.php

fix xmlrpc function call (non-static method being called statically); fix method docblock which is read by Zend_XmlRpc_Server etc

2014-02-19 11:49:26 +00:00

Languages

PHP 76.5%

Smarty 11.2%

Perl 7.1%

Shell 3.8%

Python 0.7%

Other 0.7%