Fix new project button CSRF token

TI-Planet · Mar 18, 2016 · 494ae52 · 494ae52
1 parent 64cbd3d
commit 494ae52
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/js/utils.js b/js/utils.js
@@ -52,6 +52,7 @@ function ajax(url, params, callbackOK, callbackErr, callbackAlways)
             var lastHeaders = parseResponseHeaders(xhr.getAllResponseHeaders());
             if (lastHeaders['pb-csrf-token'] !== undefined) {
                 window.CSRFToken = lastHeaders['pb-csrf-token'];
+                document.getElementById('newProjLink').setAttribute('href', "/pb/?new=1&csrf_token=" + window.CSRFToken);
             }
 
             if (typeof callbackAlways === "function") {

diff --git a/templates/sidebar.php b/templates/sidebar.php
@@ -31,7 +31,7 @@ function genSidebar()
 
     $userProjects = $pb->getUserProjectsFromDB();
 
-    $content .= '<div id="projectListHeader"><a href="/pb/?new=1&amp;csrf_token=' . $initialCSRFToken . '" class="btn btn-success btn-xs" style="float:right"><span class="glyphicon glyphicon-plus" aria-hidden="true"></span> New project</a><b>My projects:</b></div>';
+    $content .= '<div id="projectListHeader"><a href="/pb/?new=1&amp;csrf_token=' . $initialCSRFToken . '" id="newProjLink" class="btn btn-success btn-xs" style="float:right"><span class="glyphicon glyphicon-plus" aria-hidden="true"></span> New project</a><b>My projects:</b></div>';
 
     $content .= '<div id="projectList"><ul>';
     foreach ($userProjects as $project)