Updated all existing authenticated form POSTs to use (and validate) an anti forgery token

--HG--
extra : convert_revision : svn%3A5ff7c347-ad56-4c35-b696-ccb81de16e03/trunk%4044471
This commit is contained in:
skewed
2009-12-22 23:32:37 +00:00
parent 35558ee5d5
commit bbab6d0ce5
22 changed files with 22 additions and 27 deletions

View File

@@ -3,7 +3,7 @@
<%@ Import Namespace="Orchard.Security" %>
<%@ Import Namespace="Orchard.Mvc.Html" %>
<h2>Add User</h2>
<%using (Html.BeginForm()) { %>
<%using (Html.BeginFormAntiForgeryPost()) { %>
<%=Html.ValidationSummary() %>
<%=Html.EditorFor(m=>m.UserName, "inputTextLarge") %>
<%=Html.EditorFor(m=>m.Email, "inputTextLarge") %>

View File

@@ -4,7 +4,7 @@
<%@ Import Namespace="Orchard.Mvc.Html" %>
<h2>
Edit User</h2>
<%using (Html.BeginForm()) { %>
<%using (Html.BeginFormAntiForgeryPost()) { %>
<%=Html.ValidationSummary() %>
<%=Html.EditorFor(m=>m.Id) %>
<%=Html.EditorFor(m=>m.UserName, "inputTextLarge") %>

View File

@@ -3,7 +3,7 @@
<%@ Import Namespace="Orchard.Security" %>
<%@ Import Namespace="Orchard.Mvc.Html" %>
<h2>Manage Users</h2>
<% using (Html.BeginForm()) { %>
<% using (Html.BeginFormAntiForgeryPost()) { %>
<%=Html.ValidationSummary()%>
<div class="manage"><%=Html.ActionLink("Add a new user", "Create", new { }, new { @class = "button" })%></div>
<fieldset>