X-Git-Url: https://git.pterodactylus.net/?a=blobdiff_plain;f=src%2Fhttp%2Fpages%2Foptionspage.cpp;h=5c61e16b5fdf2d6616b8e6b89fa0ca53b34283e5;hb=fcb124f8d6d3f5678e82049fb8e5e23c8cfaec6d;hp=ff58489d1adb392fdcd6d79514e0652a50e36502;hpb=18b45335ba24f3b6b6d4f4acfe8c5a5ae845ce00;p=fms.git

diff --git a/src/http/pages/optionspage.cpp b/src/http/pages/optionspage.cpp
index ff58489..5c61e16 100644
--- a/src/http/pages/optionspage.cpp
+++ b/src/http/pages/optionspage.cpp
@@ -38,9 +38,10 @@ const std::string OptionsPage::GeneratePage(const std::string &method, const std
 {
 	std::string content="<h2 style=\"text-align:center;\">Options</h2>\r\n";
 	content+="<form name=\"frmoptions\" method=\"POST\"><input type=\"hidden\" name=\"formaction\" value=\"save\">";
+	content+=CreateFormPassword();
 	content+="<table><tr><th>Option</th><th>Value</th><th>Description</th></tr>";
 
-	if(queryvars.find("formaction")!=queryvars.end() && (*queryvars.find("formaction")).second=="save")
+	if(queryvars.find("formaction")!=queryvars.end() && (*queryvars.find("formaction")).second=="save" && ValidateFormPassword(queryvars))
 	{
 		SQLite3DB::Statement update=m_db->Prepare("UPDATE tblOption SET OptionValue=? WHERE Option=?;");
 		std::vector<std::string> options;
@@ -60,6 +61,7 @@ const std::string OptionsPage::GeneratePage(const std::string &method, const std
 				update.Reset();
 			}
 		}
+
 	}
 
 	SQLite3DB::Statement st=m_db->Prepare("SELECT Option,OptionValue,OptionDescription,Section,ValidValues FROM tblOption ORDER BY SortOrder;");
@@ -118,11 +120,11 @@ const std::string OptionsPage::GeneratePage(const std::string &method, const std
 		st.Step();
 		count++;
 	}
-
+	content+="<input type=\"hidden\" name=\"param[0]\" value=\"\">";
 	content+="<tr><td colspan=\"3\"><center><input type=\"submit\" value=\"Save\"></form></td></tr>";
 	content+="</table>";
 	
-	return "HTTP/1.1 200 OK\r\nContent-Type: text/html\r\n\r\n"+StringFunctions::Replace(m_template,"[CONTENT]",content);
+	return StringFunctions::Replace(m_template,"[CONTENT]",content);
 }
 
 const bool OptionsPage::WillHandleURI(const std::string &uri)