← All changes | admin/views/prices/view.html.php +3 -0 1.7.0 → 1.8.16 View file →

		@@ -30,8 +30,11 @@
30	30	$rplanpub2 = VikRequest::getInt('rplanpub2', 0, 'request');
31	31	$rplanbk1 = VikRequest::getInt('rplanbk1', 0, 'request');
32	32	$rplanbk2 = VikRequest::getInt('rplanbk2', 0, 'request');
33	33	if ($wizard) {
	34	+ if (!JSession::checkToken()) {
	35	+ throw new Exception(JText::translate('JINVALID_TOKEN'), 403);
	36	+ }
34	37	if ($rplanpub1) {
35	38	$q = "INSERT INTO `#__vikbooking_prices` (`name`, `idiva`, `breakfast_included`, `free_cancellation`, `minlos`) VALUES (" . $dbo->quote(JText::translate('VBOSTANDARDRATE')) . ", 0, $rplanbk1, 1, 0);";
36	39	$dbo->setQuery($q);
37	40	$dbo->execute();