Welcome Guest, Not a member yet? Register   Sign In
Cross-site request forgery (CSRF) $_GET
#1

[eluser]behnampmdg3[/eluser]
Hello;

How can I make it so only visitors from this website can call this function (and delete the photos)?

Thanks

Code:
public function delete($photo)
  {
   $this->load->model('load_photos_model');
   $delete = $this->load_photos_model->delete($photo);
   if($delete)
    {
     unlink('uploads/'.$photo.'.jpg');
     redirect(site_url()."gallery");
    }
   else
    {
     redirect(site_url()."gallery");
    }
  }


Messages In This Thread
Cross-site request forgery (CSRF) $_GET - by El Forum - 11-11-2012, 09:44 PM
Cross-site request forgery (CSRF) $_GET - by El Forum - 11-11-2012, 11:23 PM
Cross-site request forgery (CSRF) $_GET - by El Forum - 11-11-2012, 11:28 PM
Cross-site request forgery (CSRF) $_GET - by El Forum - 11-11-2012, 11:31 PM
Cross-site request forgery (CSRF) $_GET - by El Forum - 11-11-2012, 11:46 PM
Cross-site request forgery (CSRF) $_GET - by El Forum - 11-12-2012, 12:14 AM



Theme © iAndrew 2016 - Forum software by © MyBB