From 5b5eff37248ec423d41c29dc02428bd936950ed2 Mon Sep 17 00:00:00 2001 From: Victor Dubiniuk Date: Wed, 9 Apr 2014 17:50:58 +0300 Subject: [PATCH] Check CSRF token on nick change --- ajax/userController.php | 2 ++ 1 file changed, 2 insertions(+) diff --git a/ajax/userController.php b/ajax/userController.php index b1878358..e03207f8 100644 --- a/ajax/userController.php +++ b/ajax/userController.php @@ -40,6 +40,8 @@ class UserController extends Controller{ } public static function rename($args){ + self::preDispatchGuest(); + $memberId = Helper::getArrayValueByKey($args, 'member_id'); $name = Helper::getArrayValueByKey($_POST, 'name'); $member = new Db_Member();