version 0.3.13

[fms.git] / src / http / pages / optionspage.cpp

diff --git a/src/http/pages/optionspage.cpp b/src/http/pages/optionspage.cpp
index ff58489..5c61e16 100644 (file)
--- a/src/http/pages/optionspage.cpp
+++ b/src/http/pages/optionspage.cpp
@@ -38,9 +38,10 @@ const std::string OptionsPage::GeneratePage(const std::string &method, const std
 {\r
        std::string content="<h2 style=\"text-align:center;\">Options</h2>\r\n";\r
        content+="<form name=\"frmoptions\" method=\"POST\"><input type=\"hidden\" name=\"formaction\" value=\"save\">";\r
+       content+=CreateFormPassword();\r
        content+="<table><tr><th>Option</th><th>Value</th><th>Description</th></tr>";\r
 \r
-       if(queryvars.find("formaction")!=queryvars.end() && (*queryvars.find("formaction")).second=="save")\r
+       if(queryvars.find("formaction")!=queryvars.end() && (*queryvars.find("formaction")).second=="save" && ValidateFormPassword(queryvars))\r
        {\r
                SQLite3DB::Statement update=m_db->Prepare("UPDATE tblOption SET OptionValue=? WHERE Option=?;");\r
                std::vector<std::string> options;\r
@@ -60,6 +61,7 @@ const std::string OptionsPage::GeneratePage(const std::string &method, const std
                                update.Reset();\r
                        }\r
                }\r
+\r
        }\r
 \r
        SQLite3DB::Statement st=m_db->Prepare("SELECT Option,OptionValue,OptionDescription,Section,ValidValues FROM tblOption ORDER BY SortOrder;");\r
@@ -118,11 +120,11 @@ const std::string OptionsPage::GeneratePage(const std::string &method, const std
                st.Step();\r
                count++;\r
        }\r
-\r
+       content+="<input type=\"hidden\" name=\"param[0]\" value=\"\">";\r
        content+="<tr><td colspan=\"3\"><center><input type=\"submit\" value=\"Save\"></form></td></tr>";\r
        content+="</table>";\r
        \r
-       return "HTTP/1.1 200 OK\r\nContent-Type: text/html\r\n\r\n"+StringFunctions::Replace(m_template,"[CONTENT]",content);\r
+       return StringFunctions::Replace(m_template,"[CONTENT]",content);\r
 }\r
 \r
 const bool OptionsPage::WillHandleURI(const std::string &uri)\r