summaryrefslogtreecommitdiff
path: root/app/Controller/TwoFactorController.php
diff options
context:
space:
mode:
authorFrédéric Guillot <fred@kanboard.net>2019-01-30 20:21:12 -0800
committerFrédéric Guillot <fred@kanboard.net>2019-01-30 20:21:12 -0800
commit19ea9ed6209b36cba5cb8f96224d9e3a0c022c93 (patch)
tree2037ed7b8738d8ec2c37d05e91fc64b926cee8b9 /app/Controller/TwoFactorController.php
parentef1abecee4d7860c1e612310ed3509d321039e6f (diff)
Add missing CSRF check in TwoFactorController::deactivate()
Diffstat (limited to 'app/Controller/TwoFactorController.php')
-rw-r--r--app/Controller/TwoFactorController.php1
1 files changed, 1 insertions, 0 deletions
diff --git a/app/Controller/TwoFactorController.php b/app/Controller/TwoFactorController.php
index 5f60e946..2038c269 100644
--- a/app/Controller/TwoFactorController.php
+++ b/app/Controller/TwoFactorController.php
@@ -119,6 +119,7 @@ class TwoFactorController extends UserViewController
*/
public function deactivate()
{
+ $this->checkCSRFForm();
$user = $this->getUser();
$this->checkCurrentUser($user);