refactor(actions): centralize POST/CSRF guard flow

2026-04-24 17:59:57 +02:00
parent 87652e55da
commit cfd867bcd7
16 changed files with 175 additions and 75 deletions
--- a/pages/admin/settings/logo().php
+++ b/pages/admin/settings/logo().php
@@ -18,8 +18,11 @@ if (!$decision->isAllowed()) {
    Guard::deny();
 }

-if ((requestInput()->method()) !== 'POST') {
-    Router::redirect('admin/settings');
+if (!actionRequirePost('admin/settings')) {
+    return;
+}
+
+if (!actionRequireCsrf('admin/settings', 'admin/settings', 'logo_upload')) {
    return;
 }