tyler.durden/icingaweb2
1
0
Fork 0
mirror of https://github.com/Icinga/icingaweb2.git synced 2025-07-29 08:44:10 +02:00
Code Issues Packages Projects Releases Wiki Activity

Do not hard code the name of the form identification element

Browse Source 
Like the csrf element name the form identification element name should
be publicly accessible as well.

refs #5525
This commit is contained in:
Johannes Meyer 2014-08-27 13:14:40 +02:00
parent 6783d51f76
commit e1329058db
1 changed files with 32 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

34
library/Icinga/Web/Form.php
View File

@ -60,6 +60,13 @@ class Form extends Zend_Form
*/
protected $tokenElementName = 'CSRFToken';
/**
* Name of the form identification element
*
* @var string
*/
protected $uidElementName = 'formUID';
/**
* Set the label to use for the standard submit button
*
@ -185,6 +192,29 @@ class Form extends Zend_Form
return $this->tokenElementName;
}
/**
* Set the name to use for the form identification element
*
* @param string $name The name to set
*
* @return self
*/
public function setUidElementName($name)
{
$this->uidElementName = $name;
return $this;
}
/**
* Return the name of the form identification element
*
* @return string
*/
public function getUidElementName()
{
return $this->uidElementName;
}
/**
* Create this form
*
@ -317,7 +347,7 @@ class Form extends Zend_Form
{
$this->addElement(
'hidden',
'form_uid',
$this->uidElementName,
array(
'ignore' => true,
'value' => $this->getName()
@ -416,7 +446,7 @@ class Form extends Zend_Form
*/
public function wasSent(array $formData)
{
return isset($formData['form_uid']) && $formData['form_uid'] === $this->getName();
return isset($formData[$this->uidElementName]) && $formData[$this->uidElementName] === $this->getName();
}
/**