http://bugs.cacert.org/view.php?id=608

15 years ago · 92b688935d
parent ed2be12089
commit 92b688935d
1 changed files with 2 additions and 0 deletions
--- a/www/disputes.php
+++ b/www/disputes.php
@ -226,6 +226,7 @@

 	if($oldid == "1")
 	{
+		csrf_check('emaildispute');
 		$email = trim(mysql_escape_string(stripslashes($_REQUEST['dispute'])));
 		if($email == "")
 		{
@ -297,6 +298,7 @@

 	if($oldid == "2")
 	{
+		csrf_check('domaindispute');
 		$domain = trim(mysql_escape_string(stripslashes($_REQUEST['dispute'])));
 		if($domain == "")
 		{