verify the token on a delete call

(cherry picked from commit 678bd0a)
phpList · May 25, 2021 · d518b3d · d518b3d
1 parent 3101068
commit d518b3d
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/public_html/lists/admin/users.php b/public_html/lists/admin/users.php
@@ -233,6 +233,7 @@
 }
 
 if (!empty($delete) && isSuperUser()) {
+    verifyCsrfGetToken();
     // delete the index in delete
     $action_result = $GLOBALS['I18N']->get('deleting')." $delete ..\n";
     deleteUser($delete);