mirror of
https://gitlab.archlinux.org/archlinux/aurweb.git
synced 2025-02-03 10:43:03 +01:00
630f1cbae8
Use the routing library to build proper URIs instead of relying on the "REQUEST_URI" server variable which can be manipulated and might return bogus URIs. Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
23 lines
649 B
PHP
23 lines
649 B
PHP
<div id="generic-form" class="box">
|
|
<h2><?= __("Add Comment"); ?></h2>
|
|
<form action="<?= get_pkg_uri($row['Name']) ?>" method="post">
|
|
<fieldset>
|
|
<?php
|
|
if (isset($_REQUEST['comment']) && check_token()) {
|
|
echo '<p>' . __('Comment has been added.') . '</p>';
|
|
}
|
|
?>
|
|
<div>
|
|
<input type="hidden" name="ID" value="<?= intval($row['ID']) ?>" />
|
|
<input type="hidden" name="token" value="<?= htmlspecialchars($_COOKIE['AURSID']) ?>" />
|
|
</div>
|
|
<p>
|
|
<textarea id="id_comment" name="comment" cols="80" rows="10"></textarea>
|
|
</p>
|
|
<p>
|
|
<input type="submit" value="<?= __("Add Comment") ?>" />
|
|
</p>
|
|
</fieldset>
|
|
</form>
|
|
</div>
|
|
|