From b54360389fbbc4dea718b181d22c5bd0f6e63042 Mon Sep 17 00:00:00 2001
From: root <root@www.cacert.org>
Date: Sun, 7 Sep 2008 22:01:52 +0000
Subject: [PATCH] Added CSRF protection

---
 pages/account/43.php | 17 +++++++++--------
 1 file changed, 9 insertions(+), 8 deletions(-)

diff --git a/pages/account/43.php b/pages/account/43.php
index 454da97..c2b8ee9 100644
--- a/pages/account/43.php
+++ b/pages/account/43.php
@@ -96,6 +96,7 @@
   <tr>
     <td class="DataTD"><?=_("First Name")?>:</td>
     <td class="DataTD"><form method="post" action="account.php" onSubmit="if(!confirm('Are you sure you want to modify this DOB and/or last name?')) return false;">
+  <input type="hidden" name="csrf" value="<?=make_csrf('admchangepers')?>" />
   <input type="text" name="fname" value="<?=$row['fname']?>"></td>
   </tr>
   <tr>
@@ -151,7 +152,7 @@
   </tr>
   <tr>
     <td class="DataTD"><?=_("Is Assurer")?>:</td>
-    <td class="DataTD"><a href="account.php?id=43&amp;assurer=<?=intval($row['id'])?>"><?=$row['assurer']?></a></td>
+    <td class="DataTD"><a href="account.php?id=43&amp;assurer=<?=intval($row['id'])?>&amp;codesign=<?=$row['id']?>&amp;csrf=<?=make_csrf('admsetassuret')?>"><?=$row['assurer']?></a></td>
   </tr>
   <tr>
     <td class="DataTD"><?=_("Blocked Assurer")?>:</td>
@@ -163,15 +164,15 @@
   </tr>
   <tr>
     <td class="DataTD"><?=_("Code Signing")?>:</td>
-    <td class="DataTD"><a href="account.php?id=43&amp;codesign=<?=$row['id']?>"><?=$row['codesign']?></a></td>
+    <td class="DataTD"><a href="account.php?id=43&amp;codesign=<?=$row['id']?>&amp;codesign=<?=$row['id']?>&amp;csrf=<?=make_csrf('admcodesign')?>"><?=$row['codesign']?></a></td>
   </tr>
   <tr>
     <td class="DataTD"><?=_("Org Admin")?>:</td>
-    <td class="DataTD"><a href="account.php?id=43&amp;orgadmin=<?=$row['id']?>"><?=$row['orgadmin']?></a></td>
+    <td class="DataTD"><a href="account.php?id=43&amp;orgadmin=<?=$row['id']?>&amp;codesign=<?=$row['id']?>&amp;csrf=<?=make_csrf('admorgadmin')?>"><?=$row['orgadmin']?></a></td>
   </tr>
   <tr>
     <td class="DataTD"><?=_("TTP Admin")?>:</td>
-    <td class="DataTD"><a href="account.php?id=43&amp;ttpadmin=<?=$row['id']?>"><?=$row['ttpadmin']?></a></td>
+    <td class="DataTD"><a href="account.php?id=43&amp;ttpadmin=<?=$row['id']?>&amp;codesign=<?=$row['id']?>&amp;csrf=<?=make_csrf('admttpadmin')?>"><?=$row['ttpadmin']?></a></td>
   </tr>
   <tr>
     <td class="DataTD"><?=_("Location Admin")?>:</td>
@@ -179,7 +180,7 @@
   </tr>
   <tr>
     <td class="DataTD"><?=_("Admin")?>:</td>
-    <td class="DataTD"><a href="account.php?id=43&amp;admin=<?=$row['id']?>"><?=$row['admin']?></a></td>
+    <td class="DataTD"><a href="account.php?id=43&amp;admin=<?=$row['id']?>&amp;codesign=<?=$row['id']?>&amp;csrf=<?=make_csrf('admsetadmin')?>"><?=$row['admin']?></a></td>
   </tr>
   <tr>
     <td class="DataTD"><?=_("Ad Admin")?>:</td>
@@ -211,7 +212,7 @@
   </tr>
   <tr>
     <td class="DataTD"><?=_("Delete Account")?>:</td>
-    <td class="DataTD"><a href="account.php?id=50&amp;userid=<?=$row['id']?>"><?=_("Delete Account")?></a></td>
+    <td class="DataTD"><a href="account.php?id=50&amp;userid=<?=$row['id']?>&amp;codesign=<?=$row['id']?>&amp;csrf=<?=make_csrf('admdelaccount')?>"><?=_("Delete Account")?></a></td>
   </tr>
 <?
   // This is intensionally a $_GET for audit purposes. DO NOT CHANGE!!!
@@ -332,7 +333,7 @@
     <td class="DataTD"><?=intval($drow['points'])?></td>
     <td class="DataTD"><?=sanitizeHTML($drow['location'])?></td>
     <td class="DataTD"><?=sanitizeHTML($drow['method'])?></td>
-    <td class="DataTD"><a href="account.php?id=43&amp;userid=<?=intval($drow['to'])?>&amp;assurance=<?=intval($drow['id'])?>" onclick="return confirm('<?=_("Are you sure you want to revoke this assurance?")?>');"><?=_("Revoke")?></a></td>
+    <td class="DataTD"><a href="account.php?id=43&amp;userid=<?=intval($drow['to'])?>&amp;assurance=<?=intval($drow['id'])?>&amp;codesign=<?=$row['id']?>&amp;csrf=<?=make_csrf('admdelassurance')?>" onclick="return confirm('<?=_("Are you sure you want to revoke this assurance?")?>');"><?=_("Revoke")?></a></td>
   </tr>
 <? } ?>
   <tr>
@@ -369,7 +370,7 @@
     <td class="DataTD"><?=$drow['points']?></td>
     <td class="DataTD"><?=$drow['location']?></td>
     <td class="DataTD"><?=$drow['method']?></td>
-    <td class="DataTD"><a href="account.php?id=43&userid=<?=$drow['from']?>&assurance=<?=$drow['id']?>" onclick="return confirm('<?=_("Are you sure you want to revoke this assurance?")?>');"><?=_("Revoke")?></a></td>
+    <td class="DataTD"><a href="account.php?id=43&userid=<?=$drow['from']?>&assurance=<?=$drow['id']?>&amp;codesign=<?=$row['id']?>&amp;csrf=<?=make_csrf('admdelassurance')?>" onclick="return confirm('<?=_("Are you sure you want to revoke this assurance?")?>');"><?=_("Revoke")?></a></td>
   </tr>
 <? } ?>
   <tr>