version 0.3.13

[fms.git] / src / http / pages / optionspage.cpp

diff --git a/src/http/pages/optionspage.cpp b/src/http/pages/optionspage.cpp
index 4f7cc83..5c61e16 100644 (file)
--- a/src/http/pages/optionspage.cpp
+++ b/src/http/pages/optionspage.cpp
@@ -38,9 +38,10 @@ const std::string OptionsPage::GeneratePage(const std::string &method, const std
 {\r
        std::string content="<h2 style=\"text-align:center;\">Options</h2>\r\n";\r
        content+="<form name=\"frmoptions\" method=\"POST\"><input type=\"hidden\" name=\"formaction\" value=\"save\">";\r
+       content+=CreateFormPassword();\r
        content+="<table><tr><th>Option</th><th>Value</th><th>Description</th></tr>";\r
 \r
-       if(queryvars.find("formaction")!=queryvars.end() && (*queryvars.find("formaction")).second=="save")\r
+       if(queryvars.find("formaction")!=queryvars.end() && (*queryvars.find("formaction")).second=="save" && ValidateFormPassword(queryvars))\r
        {\r
                SQLite3DB::Statement update=m_db->Prepare("UPDATE tblOption SET OptionValue=? WHERE Option=?;");\r
                std::vector<std::string> options;\r
@@ -119,7 +120,7 @@ const std::string OptionsPage::GeneratePage(const std::string &method, const std
                st.Step();\r
                count++;\r
        }\r
-content+="<input type=\"hidden\" name=\"param[0]\" value=\"\">";\r
+       content+="<input type=\"hidden\" name=\"param[0]\" value=\"\">";\r
        content+="<tr><td colspan=\"3\"><center><input type=\"submit\" value=\"Save\"></form></td></tr>";\r
        content+="</table>";\r
        \r