Changeset 615 for vendor/current/source3/web/statuspage.c

Timestamp:

Jul 28, 2011, 4:21:02 PM (14 years ago)

Author:

Herwig Bauernfeind

Message:

Samba 3.5: Update vendor to version 3.5.10

File:

• vendor/current/source3/web/statuspage.c (modified) (2 diffs)

vendor/current/source3/web/statuspage.c

@@ -248 +248 @@
         bool waitup = False;
         TALLOC_CTX *ctx = talloc_stackframe();
+        const char form_name[] = "status";
 
         smbd_pid = pid_to_procid(pidfile_pid("smbd"));
+
+        if (!verify_xsrf_token(form_name)) {
+                goto output_page;
+        }
 
         if (cgi_variable("smbd_restart") || cgi_variable("all_restart")) {
@@ -327 +332 @@
         initPid2Machine ();
 
+output_page:
         printf("<H2>%s</H2>\n", _("Server Status"));
 
         printf("<FORM method=post>\n");
+        print_xsrf_token(cgi_user_name(), cgi_user_pass(), form_name);
 
         if (!autorefresh) {