diff options
| author | Greg Roach <greg@subaqua.co.uk> | 2022-05-19 18:55:20 +0100 |
|---|---|---|
| committer | Greg Roach <greg@subaqua.co.uk> | 2022-05-19 18:55:20 +0100 |
| commit | 81443e3cbe4eef5ccdcf8dae716a7e35f7417b60 (patch) | |
| tree | a45ee07eabbd757aea2940b93c229f637733a2b7 /resources/views/edit/change-family-members.phtml | |
| parent | 3a82224cf6be678ecfe17531decfc315d7163893 (diff) | |
| download | webtrees-81443e3cbe4eef5ccdcf8dae716a7e35f7417b60.tar.gz webtrees-81443e3cbe4eef5ccdcf8dae716a7e35f7417b60.tar.bz2 webtrees-81443e3cbe4eef5ccdcf8dae716a7e35f7417b60.zip | |
Fix: #4389 - move the CSRF token to the end of all forms, so we can detect truncated input variables
Diffstat (limited to 'resources/views/edit/change-family-members.phtml')
| -rw-r--r-- | resources/views/edit/change-family-members.phtml | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/resources/views/edit/change-family-members.phtml b/resources/views/edit/change-family-members.phtml index 2561035779..fa07624825 100644 --- a/resources/views/edit/change-family-members.phtml +++ b/resources/views/edit/change-family-members.phtml @@ -21,8 +21,6 @@ use Illuminate\Support\Collection; <h2 class="wt-page-title"><?= $title ?></h2> <form method="post" action="<?= e(route(ChangeFamilyMembersAction::class, ['tree' => $tree->name()])) ?>" class="wt-page-content" name="changefamform"> - <?= csrf_field() ?> - <input type="hidden" name="tree" value="<?= e($tree->name()) ?>"> <input type="hidden" name="xref" value="<?= e($family->xref()) ?>"> @@ -98,4 +96,6 @@ use Illuminate\Support\Collection; </a> </div> </div> + + <?= csrf_field() ?> </form> |