SOme security!

UniGe · Mar 6, 2005 · 40b3723 · 40b3723
1 parent c6f4379
commit 40b3723
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/admin/innodb.php b/admin/innodb.php
@@ -4,15 +4,15 @@
 
    require_login();
 
-   if (!isadmin) {
+   if (!isadmin()) {
        error('Admin only');
    }
 
    print_header("Convert all tables from MYISAM to InnoDB", "Convert all tables from MYISAM to InnoDB", 
                 "Convert all tables from MYISAM to InnoDB");
 
 
-   if ($confirm) {
+   if (!empty($confirm) and confirm_sesskey()) {
 
        print_heading("Please be patient and wait for this to complete...");
 
@@ -23,7 +23,8 @@
            }
        }
    } else {
-       notice("Are you sure you want convert all your tables to the InnoDB format?", "innodb.php?confirm=yes", "index.php");
+       notice_yesno("Are you sure you want convert all your tables to the InnoDB format?", 
+                    "innodb.php?confirm=yes&sesskey=".sesskey(), "index.php");
    }
 
 ?>