0
0
mirror of https://github.com/postfixadmin/postfixadmin.git synced 2024-09-20 03:36:20 +02:00
postfixadmin/templates/users_edit-alias.tpl
Christian Boltz 52a7df2b3a Add CSRF protection for POST requests
Add the CSRF token to all forms, and validate it when those forms are
submitted.

https://sourceforge.net/p/postfixadmin/bugs/372/



git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1842 a1433add-5e2c-0410-b055-b7f2511e0802
2016-05-20 20:42:04 +00:00

43 lines
1.2 KiB
Smarty

<div id="edit_form">
<form name="alias" method="post" action="">
<input class="flat" type="hidden" name="token" value="{$smarty.session.PFA_token|escape:"url"}" />
<table>
<tr>
<th colspan="3">{$PALANG.pEdit_alias_welcome}<br /><em>{$PALANG.pEdit_alias_help}</em></th>
</tr>
<tr>
<td class="label"><label>{$PALANG.alias}:</label></td>
<td><em>{$USERID_USERNAME}</em></td>
<td>&nbsp;</td>
</tr>
<tr>
<td class="label"><label>{$PALANG.to}:</label></td>
<td><textarea class="flat" rows="4" cols="50" name="fGoto">
{foreach from=$tGotoArray item=address}
{$address}
{/foreach}
</textarea>
</td>
<td>&nbsp;</td>
</tr>
<tr>
<td>&nbsp;</td>
<td colspan="2">
<input class="flat" type="radio" name="fForward_and_store" value="1"{$forward_and_store}/>
{$PALANG.pEdit_alias_forward_and_store}<br />
<input class="flat" type="radio" name="fForward_and_store" value="0" {$forward_only}/>
{$PALANG.pEdit_alias_forward_only}
</td>
</tr>
<tr>
<td>&nbsp;</td>
<td>
<input class="button" type="submit" name="submit" value="{$PALANG.save}" />
<input class="button" type="submit" name="fCancel" value="{$PALANG.exit}" />
</td>
<td>&nbsp;</td>
</tr>
</table>
</form>
</div>