Prevent request forgery exploit in card.dm

This commit is contained in:
Jeremy Liberman
2014-05-13 22:36:16 -05:00
parent d23340a49b
commit 28aed34284
+4 -3
View File
@@ -250,10 +250,11 @@
P.info += " [get_access_desc(A)]"
if ("terminate")
modify.assignment = "Terminated"
modify.access = list()
if (is_authenticated())
modify.assignment = "Terminated"
modify.access = list()
callHook("terminate_employee", list(modify))
callHook("terminate_employee", list(modify))
if (modify)
modify.name = text("[modify.registered_name]'s ID Card ([modify.assignment])")