Fix CSRF check

collectiveaccess · May 4, 2022 · 4740f39 · 4740f39
1 parent 198eaf9
commit 4740f39
Show file tree

Hide file tree

Showing 4 changed files with 6 additions and 6 deletions.
diff --git a/themes/default/views/Contact/form_html.php b/themes/default/views/Contact/form_html.php
@@ -29,7 +29,7 @@
 	}
 ?>
 	<form id="contactForm" action="<?php print caNavUrl($this->request, "", "Contact", "send"); ?>" role="form" method="post">
-	    <input type="hidden" name="crsfToken" value="<?php print caGenerateCSRFToken($this->request); ?>"/>
+	    <input type="hidden" name="csrfToken" value="<?php print caGenerateCSRFToken($this->request); ?>"/>
 <?php
 	if($pn_id && $t_item->getPrimaryKey()){
 ?>
@@ -95,4 +95,4 @@
 		<input type="hidden" name="sum" value="<?php print $vn_sum; ?>">
 	</form>
 
-</div><!-- end col --></div><!-- end row -->
+</div><!-- end col --></div><!-- end row -->
diff --git a/themes/default/views/LoginReg/form_login_html.php b/themes/default/views/LoginReg/form_login_html.php
@@ -41,7 +41,7 @@
 	}
 ?>
 			<form id="LoginForm" action="<?php print caNavUrl($this->request, "", "LoginReg", "login"); ?>" class="form-horizontal" role="form" method="POST">
-				<input type="hidden" name="crsfToken" value="<?php print caGenerateCSRFToken($this->request); ?>"/>
+				<input type="hidden" name="csrfToken" value="<?php print caGenerateCSRFToken($this->request); ?>"/>
 				<div class="form-group">
 					<label for="username" class="col-sm-<?php print $vn_label_col; ?> control-label"><?php print _t("Username"); ?></label>
 					<div class="col-sm-7">

diff --git a/themes/default/views/LoginReg/form_profile_html.php b/themes/default/views/LoginReg/form_profile_html.php
@@ -47,7 +47,7 @@
 	}
 ?>
 	<form id="ProfileForm" action="<?php print caNavUrl($this->request, "", "LoginReg", "profileSave"); ?>" class="form-horizontal" role="form" method="POST">
-        <input type="hidden" name="crsfToken" value="<?php print caGenerateCSRFToken($this->request); ?>"/>
+        <input type="hidden" name="csrfToken" value="<?php print caGenerateCSRFToken($this->request); ?>"/>
 <?php
 		foreach(array("fname", "lname", "email") as $vs_field){
 			if($va_errors[$vs_field]){
@@ -103,4 +103,4 @@
 </script>
 <?php
 	}
-?>
+?>
diff --git a/themes/default/views/LoginReg/form_register_html.php b/themes/default/views/LoginReg/form_register_html.php
@@ -59,7 +59,7 @@
 	}
 ?>
 	<form id="RegForm" action="<?php print caNavUrl($this->request, "", "LoginReg", "register"); ?>" class="form-horizontal" role="form" method="POST">
-	    <input type="hidden" name="crsfToken" value="<?php print caGenerateCSRFToken($this->request); ?>"/>
+	    <input type="hidden" name="csrfToken" value="<?php print caGenerateCSRFToken($this->request); ?>"/>
 <?php
 	if($this->request->isAjax()){
 ?>