From 32e6a5ef38f692f455d2d2fc77d6216a6f11dede Mon Sep 17 00:00:00 2001 From: jmontoyaa Date: Mon, 27 Mar 2017 13:49:35 +0200 Subject: [PATCH] Fix double link creation see BT#12235 --- main/link/link.php | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/main/link/link.php b/main/link/link.php index c44a6ad527..83a759782e 100755 --- a/main/link/link.php +++ b/main/link/link.php @@ -99,14 +99,16 @@ $show = isset($_REQUEST['show']) && in_array(trim($_REQUEST['show']), ['all', 'n $categoryId = isset($_REQUEST['category_id']) ? intval($_REQUEST['category_id']) : ''; $linkListUrl = api_get_self().'?'.api_get_cidreq().'&category_id='.$categoryId.'&show='.$show; $content = ''; +$token = Security::get_existing_token(); switch ($action) { case 'addlink': if (api_is_allowed_to_edit(null, true)) { - $form = Link::getLinkForm(null, 'addlink'); - if ($form->validate()) { + $form = Link::getLinkForm(null, 'addlink', $token); + if ($form->validate() && Security::check_token('get')) { // Here we add a link Link::addlinkcategory("link"); + Security::clear_token(); header('Location: '.$linkListUrl); exit; }