summaryrefslogtreecommitdiff
path: root/includes/sys_form.php
diff options
context:
space:
mode:
authorIgor Scheller <igor.scheller@igorshp.de>2018-11-20 16:02:03 +0100
committermsquare <msquare@notrademark.de>2018-11-21 19:24:36 +0100
commit944c29b96429ec95ac1371cb33cc43704a60c7b1 (patch)
tree7be99e68d8c15fc7e210a4b3ccc44861a8d1de64 /includes/sys_form.php
parentfd37c9d60ea818dc9a562fa88ff5f9a50132506f (diff)
Require POST for sending forms
* Ensure that the form is submitted with a post request * Replaced several links with forms Closes #494 (Security Vulnerability)
Diffstat (limited to 'includes/sys_form.php')
-rw-r--r--includes/sys_form.php18
1 files changed, 14 insertions, 4 deletions
diff --git a/includes/sys_form.php b/includes/sys_form.php
index 07a61dbb..f9779ec7 100644
--- a/includes/sys_form.php
+++ b/includes/sys_form.php
@@ -216,13 +216,23 @@ function form_info($label, $text = '')
*
* @param string $name
* @param string $label
+ * @param string $class
+ * @param bool $wrapForm
* @return string
*/
-function form_submit($name, $label)
+function form_submit($name, $label, $class = '', $wrapForm = true)
{
+ $button = '<button class="btn btn-primary' . ($class ? ' ' . $class : '') . '" type="submit" name="' . $name . '">'
+ . $label
+ . '</button>';
+
+ if (!$wrapForm) {
+ return $button;
+ }
+
return form_element(
- '<button class="btn btn-primary" type="submit" name="' . $name . '">' . $label . '</button>',
- ''
+ null,
+ $button
);
}
@@ -391,7 +401,7 @@ function form_select($name, $label, $values, $selected, $selectText = '')
*/
function form_element($label, $input, $for = '')
{
- if ($label == '') {
+ if (empty($label)) {
return '<div class="form-group">' . $input . '</div>';
}