fa/breadcrumb-the-shire
1
0
Fork 1
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

refactor(actions): centralize POST/CSRF guard flow

Browse Source
This commit is contained in:
Felix Schneider
2026-04-24 17:59:57 +02:00
parent 87652e55da
commit cfd867bcd7
16 changed files with 175 additions and 75 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
pages/admin/settings/logo-delete().php
View File

@@ -3,7 +3,6 @@
use MintyPHP\Http\SessionStoreInterface;
use MintyPHP\Router;
use MintyPHP\Service\Access\SettingsAuthorizationPolicy;
use MintyPHP\Session;
use MintyPHP\Support\Flash;
use MintyPHP\Support\Guard;
@@ -19,16 +18,11 @@ if (!$decision->isAllowed()) {
Guard::deny();
}
if ((requestInput()->method()) !== 'POST') {
Router::redirect('admin/settings');
if (!actionRequirePost('admin/settings')) {
return;
}
$errorBag = formErrors();
if (!Session::checkCsrfToken()) {
$errorBag->addGlobal(t('Form expired, please try again'));
flashFormErrors($errorBag, 'admin/settings', 'settings_logo_delete');
Router::redirect('admin/settings');
if (!actionRequireCsrf('admin/settings', 'admin/settings', 'settings_logo_delete')) {
return;
}