experimental CSRF protection

[tt-rss.git] / classes / pref_labels.php

diff --git a/classes/pref_labels.php b/classes/pref_labels.php
index 0d60731f3498b743370def6f174256010ddba24b..951ae45ed1492eb7610fb1fd0d06ed5e5c266ff7 100644 (file)
--- a/classes/pref_labels.php
+++ b/classes/pref_labels.php
@@ -1,6 +1,12 @@
 <?php
 class Pref_Labels extends Protected_Handler {
 
+       function csrf_ignore($method) {
+               $csrf_ignored = array("index", "getlabeltree", "edit");
+
+               return array_search($method, $csrf_ignored) !== false;
+       }
+
        function edit() {
                $label_id = db_escape_string($_REQUEST['id']);