anti-csrf

2020-03-17 02:10:47 +00:00
parent 873bd1a73e
commit 1e7477dd96
4 changed files with 8 additions and 2 deletions
--- a/templates/admin_song_new.html
+++ b/templates/admin_song_new.html
@@ -6,9 +6,10 @@
 {% endfor %}
 <div class="song-form">
    <form method="post">
+        <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">

        <div class="form-field">
-            <span class="checkbox"><input type="checkbox" name="enabled" id="enabled" checked><label for="enabled"> Enabled</label></span>
+            <span class="checkbox"><input type="checkbox" name="enabled" id="enabled"><label for="enabled"> Enabled</label></span>
        </div>

        <div class="form-field">