diff options
| author | Bharat Mediratta <bharat@menalto.com> | 2010-09-11 10:41:47 -0700 |
|---|---|---|
| committer | Bharat Mediratta <bharat@menalto.com> | 2010-09-11 10:41:47 -0700 |
| commit | 14ae1fde25eb8b22a2fc92453ba12c8e74aba433 (patch) | |
| tree | d202c62f06e51552203e157b701bf7586028b90d /modules/gallery | |
| parent | cef7ca9cf27dc7bcdbc92e754cfe9ae3a30ae3b0 (diff) | |
Use the actual csrf token, not the placeholder (url::site doesn't
replace that). Fixes ticket #1361
Diffstat (limited to 'modules/gallery')
| -rw-r--r-- | modules/gallery/views/upgrader.html.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/modules/gallery/views/upgrader.html.php b/modules/gallery/views/upgrader.html.php index 554cf30d..1ec49c77 100644 --- a/modules/gallery/views/upgrader.html.php +++ b/modules/gallery/views/upgrader.html.php @@ -84,7 +84,7 @@ </div> <? else: ?> <div id="upgrade_button" class="button button-active"> - <a id="upgrade_link" href="<?= url::site("upgrader/upgrade?csrf=__CSRF__") ?>"> + <a id="upgrade_link" href="<?= url::site("upgrader/upgrade?csrf=" . access::csrf_token()) ?>"> <?= t("Upgrade all") ?> </a> </div> |