baoshuo/S2OJ
baoshuo/S2OJ
1
1
Fork 0
mirror of https://github.com/renbaoshuo/S2OJ.git synced 2024-11-22 03:08:41 +00:00
Code Issues Actions Packages Releases Activity

fix(problem/manage/data): csrf token

Browse Source
This commit is contained in:
Baoshuo Ren 2023-02-14 10:52:19 +08:00
parent 40e01f4fb9
commit 47167a5c7a
Signed by: baoshuo
GPG Key ID: 00CB9680AB29F51A
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
web/app/controllers/problem_data_manage.php
View File

@ -63,6 +63,8 @@ function echoFilePre($file_name) {
// 上传数据 // 上传数据
if ($_POST['problem_data_file_submit'] == 'submit') { if ($_POST['problem_data_file_submit'] == 'submit') {
crsf_defend();
if ($_FILES["problem_data_file"]["error"] > 0) { if ($_FILES["problem_data_file"]["error"] > 0) {
$errmsg = "Error: " . $_FILES["problem_data_file"]["error"]; $errmsg = "Error: " . $_FILES["problem_data_file"]["error"];
UOJResponse::message('<div>' . HTML::escape($errmsg) . '</div><a href="">返回</a>'); UOJResponse::message('<div>' . HTML::escape($errmsg) . '</div><a href="">返回</a>');
@ -625,6 +627,7 @@ if ($problem['hackable']) {
<button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button> <button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button>
</div> </div>
<form action="" method="post" enctype="multipart/form-data" role="form"> <form action="" method="post" enctype="multipart/form-data" role="form">
<?= HTML::hiddenToken() ?>
<div class="modal-body"> <div class="modal-body">
<label class="form-label" for="problem_data_file">上传 zip 文件</label> <label class="form-label" for="problem_data_file">上传 zip 文件</label>
<input class="form-control" type="file" name="problem_data_file" id="problem_data_file" accept=".zip"> <input class="form-control" type="file" name="problem_data_file" id="problem_data_file" accept=".zip">