ifl/iflrandevu
1
1
Fork 0
forked from mirrors/easyappointments
Code Issues 6 Pull requests Releases 3 Activity

CSRF protection for cancel appointment use case

Browse source
This commit is contained in:
Alex Tselegidis 2015-05-27 23:32:26 +02:00
parent 36d73a24c0
commit daf4865c29
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
src/application/views/appointments/book.php
View file

@ -137,6 +137,7 @@
<form id="cancel-appointment-form" method="post"
action="' . $this->config->item('base_url')
. '/index.php/appointments/cancel/' . $appointment_data['hash'] . '">
<input type="hidden" name="csrfToken" value="' . $this->security->get_csrf_hash() . '" />
<textarea name="cancel_reason" style="display:none"></textarea>
<button id="cancel-appointment" class="btn btn-inverse">' .
$this->lang->line('cancel') . '</button>