Uploaded image for project: 'phpBB'
  1. phpBB
  2. PHPBB-14789

Add missing link hash and form token checks to ACP

XMLWordPrintable

    • Icon: Improvement Improvement
    • Resolution: Fixed
    • Icon: Major Major
    • 3.1.10-RC1
    • None
    • ACP
    • None

      This will further harden the ACP security by adding link hashes to links and form tokens to forms that did not have these yet and result in modified settings or write action on the filesystem or database. These few links and forms were still relying on the global ACP protection, mainly due to them not posing further risks of compromising data. After this change these willnow also be properly protected against tampering.

            Marc Marc
            CHItA CHItA
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: