Nemcio/adminer
1
0
Fork 0
mirror of https://github.com/vrana/adminer.git synced 2026-03-08 05:30:48 +01:00
Code Issues Packages Projects Releases Activity

Disallow scripts without nonce

Browse Source
This commit is contained in:
Jakub Vrana
2018-01-13 22:17:00 +01:00
parent e23da5da0e
commit 80d030f51a
9 changed files with 32 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
plugins/login-sqlite.php
View File

@@ -14,7 +14,7 @@ class AdminerLoginSqlite {
function loginForm() {
?>
<script>
<script<?php echo nonce(); ?>>
addEventListener('load', function () {
var driver = qs('name="auth[driver]"');
if (isTag(driver, 'select')) {