j_angliss

--- plugins/change_sqlpass/functions.php  2009-09-04 06:23:05.000000000 -0700
+++ plugins/change_sqlpass/functions.php       2010-05-12 06:36:16.000000000 -0700
@@ -27,6 +27,7 @@
    define('PASSWORD_ENCRYPTION_MD5', 'MD5');


+
 /**
   * Include Pear DB class
   *
@@ -473,7 +474,7 @@
    sqgetGlobalVar('csp_was_already_encrypted_port', $csp_was_already_encrypted_port, SQ_SESSION);
    sqgetGlobalVar('HTTP_HOST', $HTTP_HOST, SQ_SERVER);
    if (empty($base_uri)) $base_uri = sqm_baseuri();
-   $loc = $base_uri . 'src/options.php?optpage=xx&optmode=submit&csp_change_success=no';
+   $loc = $base_uri . 'src/options.php?optpage=xx&optmode=submit&csp_change_success=no&smtoken=' . sm_generate_security_token();
    if ($csp_was_already_encrypted_port == 443)
       $cancel_location = 'https://' . $HTTP_HOST . $loc;
    else if ($csp_was_already_encrypted_port)
@@ -537,6 +538,7 @@
       <tr>
          <td align="right" colspan="2">
             <input type="hidden" name="csp_submit_change" value="1">
+            <input type="hidden" name="smtoken" value="<?php echo sm_generate_security_token(); ?>">
             <input type="submit" value="<?php echo _("Submit"); ?>">


@@ -926,7 +928,7 @@
          if (!empty($csp_was_force_mode))
             $loc = $base_uri . 'src/right_main.php';
          else
-            $loc = $base_uri . 'src/options.php?optpage=xx&optmode=submit&csp_change_success=yes';
+            $loc = $base_uri . 'src/options.php?optpage=xx&optmode=submit&csp_change_success=yes&smtoken=' . sm_generate_security_token();
          if ($csp_was_already_encrypted_port == 443)
             $redirect_location = 'https://' . $HTTP_HOST . $loc;
          else if ($csp_was_already_encrypted_port)