diff --git a/airtime_mvc/application/forms/BillingClient.php b/airtime_mvc/application/forms/BillingClient.php index 6057775ba..70def8c33 100644 --- a/airtime_mvc/application/forms/BillingClient.php +++ b/airtime_mvc/application/forms/BillingClient.php @@ -187,18 +187,10 @@ class Application_Form_BillingClient extends Zend_Form $passwordVerify->addValidator('Identical', false, array('token' => 'password2')); $passwordVerify->addValidator($notEmptyValidator); $this->addElement($passwordVerify); - - /* - $csrf_namespace = new Zend_Session_Namespace('csrf_namespace'); - $csrf_element = new Zend_Form_Element_Hidden('csrf'); - $csrf_element->setValue($csrf_namespace->authtoken)->setRequired('true')->removeDecorator('HtmlTag')->removeDecorator('Label'); - $this->addElement($csrf_element); - - - $this->addElement('hash', 'csrf', array( + + $this->addElement('hash', 'csrf_client', array( 'salt' => 'unique' )); - */ $submit = new Zend_Form_Element_Submit("submit"); $submit->setIgnore(true) diff --git a/airtime_mvc/application/forms/BillingUpgradeDowngrade.php b/airtime_mvc/application/forms/BillingUpgradeDowngrade.php index 7947ab60b..858f74ddd 100644 --- a/airtime_mvc/application/forms/BillingUpgradeDowngrade.php +++ b/airtime_mvc/application/forms/BillingUpgradeDowngrade.php @@ -3,16 +3,9 @@ class Application_Form_BillingUpgradeDowngrade extends Zend_Form { public function init() { - /* - $csrf_namespace = new Zend_Session_Namespace('csrf_namespace'); - $csrf_element = new Zend_Form_Element_Hidden('csrf'); - $csrf_element->setValue($csrf_namespace->authtoken)->setRequired('true')->removeDecorator('HtmlTag')->removeDecorator('Label'); - $this->addElement($csrf_element); - - $this->addElement('hash', 'csrf', array( + $this->addElement('hash', 'csrf_upgrade', array( //Needs a unique ID (csrf_upgrade) so it doesn't conflict with other tokens in subforms 'salt' => 'unique' )); - */ $productPrices = array(); $productTypes = array(); diff --git a/airtime_mvc/application/views/scripts/billing/upgrade.phtml b/airtime_mvc/application/views/scripts/billing/upgrade.phtml index 835b50d1f..fc1799140 100644 --- a/airtime_mvc/application/views/scripts/billing/upgrade.phtml +++ b/airtime_mvc/application/views/scripts/billing/upgrade.phtml @@ -274,7 +274,7 @@ echo($currentProduct["name"]);
- csrf ?> + csrf_upgrade ?>
newproductid ?> @@ -353,8 +353,9 @@ echo($currentProduct["name"]);
- -
+ csrf_client ?> + +
getElement("71")->renderViewHelper(); ?>
@@ -379,7 +380,7 @@ echo($currentProduct["name"]); Total:
- +
\ No newline at end of file