From 11f1cfcf4e4f575625c91309159e67d40baca28f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 29 Aug 2021 00:54:57 +0200
Subject: [PATCH] Proper way to fix CSRF in /schedule/backup/

---
 web/schedule/backup/index.php        | 10 +++++++---
 web/templates/admin/list_backup.html |  2 +-
 2 files changed, 8 insertions(+), 4 deletions(-)

diff --git a/web/schedule/backup/index.php b/web/schedule/backup/index.php
index 07412e7103..8d51832e58 100644
--- a/web/schedule/backup/index.php
+++ b/web/schedule/backup/index.php
@@ -1,14 +1,18 @@
 <?php
 
-// Preventing CSRF
-prevent_post_csrf(true);
-
 // Init
 error_reporting(NULL);
 ob_start();
 session_start();
 include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
 
+// Check token
+if ((!isset($_GET['token'])) || ($_SESSION['token'] != $_GET['token'])) {
+    die($_SESSION['token']);
+    header('location: /login/');
+    exit();
+}
+
 $v_username = escapeshellarg($user);
 exec (VESTA_CMD."v-schedule-user-backup ".$v_username, $output, $return_var);
 if ($return_var == 0) {
diff --git a/web/templates/admin/list_backup.html b/web/templates/admin/list_backup.html
index ef00139dff..87876cdea3 100644
--- a/web/templates/admin/list_backup.html
+++ b/web/templates/admin/list_backup.html
@@ -1,6 +1,6 @@
     <div class="l-center">
       <div class="l-sort clearfix noselect">
-        <a href="/schedule/backup/" class="l-sort__create-btn" title="<?=__('Create Backup')?>"></a>
+        <a href="/schedule/backup/?token=<?=$_SESSION['token']?>" class="l-sort__create-btn" title="<?=__('Create Backup')?>"></a>
         <div class="l-sort-toolbar clearfix">
           <table>
             <tr>