  |
1 | 1 | | <?php |
| |
2 | 2 | | /* |
 |
3 | | - | $Id: account_password.php 1739 2007-12-20 00:52:16Z hpdl $ |
| |
| 3 | + | $Id: account_password.php 1843 2008-12-12 13:32:10Z hpdl $ |
|
4 | 4 | | |
| |
5 | 5 | | osCommerce, Open Source E-Commerce Solutions |
| |
6 | 6 | | http://www.oscommerce.com |
| |
7 | 7 | | |
|
8 | | - | Copyright (c) 2003 osCommerce |
| |
| 8 | + | Copyright (c) 2008 osCommerce |
|
9 | 9 | | |
| |
10 | 10 | | Released under the GNU General Public License |
| |
11 | 11 | | */ |
| |
|
|
 |
… |
|
20 | 20 | | // needs to be included earlier to set the success message in the messageStack |
| |
21 | 21 | | require(DIR_WS_LANGUAGES . $language . '/' . FILENAME_ACCOUNT_PASSWORD); |
| |
22 | 22 | | |
|
23 | | - | if (isset($HTTP_POST_VARS['action']) && ($HTTP_POST_VARS['action'] == 'process')) { |
| |
| 23 | + | if (isset($HTTP_POST_VARS['action']) && ($HTTP_POST_VARS['action'] == 'process') && isset($HTTP_POST_VARS['formid']) && ($HTTP_POST_VARS['formid'] == $sessiontoken)) { |
|
24 | 24 | | $password_current = tep_db_prepare_input($HTTP_POST_VARS['password_current']); |
| |
25 | 25 | | $password_new = tep_db_prepare_input($HTTP_POST_VARS['password_new']); |
| |
26 | 26 | | $password_confirmation = tep_db_prepare_input($HTTP_POST_VARS['password_confirmation']); |
| |
|
|
|
… |
|
87 | 87 | | <!-- left_navigation_eof //--> |
| |
88 | 88 | | </table></td> |
| |
89 | 89 | | <!-- body_text //--> |
|
90 | | - | <td width="100%" valign="top"><?php echo tep_draw_form('account_password', tep_href_link(FILENAME_ACCOUNT_PASSWORD, '', 'SSL'), 'post', 'onSubmit="return check_form(account_password);"') . tep_draw_hidden_field('action', 'process'); ?><table border="0" width="100%" cellspacing="0" cellpadding="0"> |
| |
| 90 | + | <td width="100%" valign="top"><?php echo tep_draw_form('account_password', tep_href_link(FILENAME_ACCOUNT_PASSWORD, '', 'SSL'), 'post', 'onSubmit="return check_form(account_password);"', true) . tep_draw_hidden_field('action', 'process'); ?><table border="0" width="100%" cellspacing="0" cellpadding="0"> |
|
91 | 91 | | <tr> |
| |
92 | 92 | | <td><table border="0" width="100%" cellspacing="0" cellpadding="0"> |
| |
93 | 93 | | <tr> |