niklas.ortmann/webprogrammierung
0
0
Fork 0
Code Issues 2 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

Update updateComment-controller.php

Browse Source
This commit is contained in:
NOrtmann1
2026-07-19 16:01:06 +02:00
parent d5fc5f3065
commit 50b29c96d6
1 changed files with 10 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
php/controller/updateComment-controller.php
+10 -1
View File
@@ -5,6 +5,7 @@ if (session_status() === PHP_SESSION_NONE) {
} }
require_once "php/model/CommentManager.php"; require_once "php/model/CommentManager.php";
require_once "includes/csrf.php";
if ($_SERVER["REQUEST_METHOD"] !== "POST") { if ($_SERVER["REQUEST_METHOD"] !== "POST") {
header("Location: index.php"); header("Location: index.php");
@@ -16,6 +17,14 @@ if (!isset($_SESSION["user_email"])) {
exit(); exit();
} }
// CSRF-Token prüfen, bevor irgendeine Änderung vorgenommen wird
if (!csrf_verify()) {
$_SESSION["comment_message"] = "Deine Sitzung ist abgelaufen. Bitte lade die Seite neu.";
$_SESSION["comment_message_type"] = "error";
header("Location: index.php");
exit();
}
$commentId = filter_input( $commentId = filter_input(
INPUT_POST, INPUT_POST,
"comment_id", "comment_id",
@@ -89,4 +98,4 @@ header(
. urlencode((string) $articleId) . urlencode((string) $articleId)
. "#comments" . "#comments"
); );
exit(); exit();