From 352477d825ab875b975495ff784c8addaaa6af21 Mon Sep 17 00:00:00 2001
From: Marius Cramer <m.cramer@pixcept.de>
Date: Thu, 21 May 2015 05:23:44 -0400
Subject: [PATCH] - fixed csrf protection

---
 interface/web/admin/language_complete.php |    1 +
 1 files changed, 1 insertions(+), 0 deletions(-)

diff --git a/interface/web/admin/language_complete.php b/interface/web/admin/language_complete.php
index 67cfb86..d8f4bbd 100644
--- a/interface/web/admin/language_complete.php
+++ b/interface/web/admin/language_complete.php
@@ -32,6 +32,7 @@
 
 //* Check permissions for module
 $app->auth->check_module_permissions('admin');
+$app->auth->check_security_permissions('admin_allow_langedit');
 if($conf['demo_mode'] == true) $app->error('This function is disabled in demo mode.');
 
 //* This is only allowed for administrators

--
Gitblit v1.9.1