fix: added missing error message if CSRF token check fails (#2330)

thorsten · Feb 14, 2023 · ee509f2 · ee509f2
1 parent 1fbfe24
commit ee509f2
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/phpmyfaq/admin/configuration.php b/phpmyfaq/admin/configuration.php
@@ -88,6 +88,8 @@
         }
 
         $faqConfig->getAll();
+    } elseif ('saveConfig' === $userAction && $currentToken !== $csrfToken) {
+        echo '<div class="alert alert-danger">Error: CSRF Token mismatch!</div>';
     }
     ?>
   <form id="config_list" name="config_list" method="post"