Security token is only need once in this form / list HEAD
authorDirk Haun <dirk@haun-online.de>
Sat Oct 03 16:32:24 2009 +0200 (5 months ago)
branchHEAD
changeset 7351d9d8f9519bcc
parent 7350a8311a63ee0c
child 73527db76f494446
Security token is only need once in this form / list
system/lib-admin.php
     1.1 --- a/system/lib-admin.php	Sat Oct 03 16:27:35 2009 +0200
     1.2 +++ b/system/lib-admin.php	Sat Oct 03 16:32:24 2009 +0200
     1.3 @@ -1221,40 +1221,49 @@
     1.4  {
     1.5      global $_CONF, $LANG_TRB;
     1.6  
     1.7 +    static $added_token;
     1.8 +
     1.9      $retval = '';
    1.10  
    1.11      switch($fieldname) {
    1.12 -        case "edit":
    1.13 -            $retval = COM_createLink($icon_arr['edit'],
    1.14 -                "{$_CONF['site_admin_url']}/trackback.php?mode=editservice&amp;service_id={$A['pid']}");
    1.15 -            break;
    1.16 -        case "name":
    1.17 -            $retval = COM_createLink($A['name'], $A['site_url']);
    1.18 -            break;
    1.19 -        case "method":
    1.20 -            if ($A['method'] == 'weblogUpdates.ping') {
    1.21 -                $retval = $LANG_TRB['ping_standard'];
    1.22 -            } else if ($A['method'] == 'weblogUpdates.extendedPing') {
    1.23 -                $retval = $LANG_TRB['ping_extended'];
    1.24 -            } else {
    1.25 -                $retval = '<span class="warningsmall">' .
    1.26 -                        $LANG_TRB['ping_unknown'] .  '</span>';
    1.27 -            }
    1.28 -            break;
    1.29 -        case "is_enabled":
    1.30 -            if ($A['is_enabled'] == 1) {
    1.31 -                $switch = ' checked="checked"';
    1.32 -            } else {
    1.33 -                $switch = '';
    1.34 -            }
    1.35 -            $retval = "<input type=\"checkbox\" name=\"changedservices[]\" "
    1.36 -                . "onclick=\"submit()\" value=\"{$A['pid']}\"$switch" . XHTML . ">";
    1.37 +    case 'edit':
    1.38 +        $retval = COM_createLink($icon_arr['edit'],
    1.39 +            "{$_CONF['site_admin_url']}/trackback.php?mode=editservice&amp;service_id={$A['pid']}");
    1.40 +        break;
    1.41 +
    1.42 +    case 'name':
    1.43 +        $retval = COM_createLink($A['name'], $A['site_url']);
    1.44 +        break;
    1.45 +
    1.46 +    case 'method':
    1.47 +        if ($A['method'] == 'weblogUpdates.ping') {
    1.48 +            $retval = $LANG_TRB['ping_standard'];
    1.49 +        } else if ($A['method'] == 'weblogUpdates.extendedPing') {
    1.50 +            $retval = $LANG_TRB['ping_extended'];
    1.51 +        } else {
    1.52 +            $retval = '<span class="warningsmall">' . $LANG_TRB['ping_unknown']
    1.53 +                    .  '</span>';
    1.54 +        }
    1.55 +        break;
    1.56 +
    1.57 +    case 'is_enabled':
    1.58 +        if ($A['is_enabled'] == 1) {
    1.59 +            $switch = ' checked="checked"';
    1.60 +        } else {
    1.61 +            $switch = '';
    1.62 +        }
    1.63 +        $retval = "<input type=\"checkbox\" name=\"changedservices[]\" "
    1.64 +            . "onclick=\"submit()\" value=\"{$A['pid']}\"$switch" . XHTML . ">";
    1.65 +        if (! isset($added_token)) {
    1.66              $retval .= "<input type=\"hidden\" name=\"" . CSRF_TOKEN
    1.67                      . "\" value=\"{$token}\"" . XHTML . ">";
    1.68 -            break;
    1.69 -        default:
    1.70 -            $retval = $fieldvalue;
    1.71 -            break;
    1.72 +            $added_token = true;
    1.73 +        }
    1.74 +        break;
    1.75 +
    1.76 +    default:
    1.77 +        $retval = $fieldvalue;
    1.78 +        break;
    1.79      }
    1.80  
    1.81      return $retval;