Manage{Tags,Users}: add call to resetSessionToken

2023-03-11 19:34:52 +01:00 · 2023-03-11 19:34:52 +01:00 · a06902335b
commit a06902335b
parent cf0b9ebaf9
2 changed files with 4 additions and 0 deletions
--- a/controllers/ManageTags.php
+++ b/controllers/ManageTags.php
@ -14,6 +14,8 @@ class ManageTags extends HTMLController
 		if (!Registry::get('user')->isAdmin())
 			throw new NotAllowedException();

+		Session::resetSessionToken();
+
 		$options = [
 			'form' => [
 				'action' => BASEURL . '/edittag/',
--- a/controllers/ManageUsers.php
+++ b/controllers/ManageUsers.php
@ -14,6 +14,8 @@ class ManageUsers extends HTMLController
 		if (!Registry::get('user')->isAdmin())
 			throw new NotAllowedException();

+		Session::resetSessionToken();
+
 		$options = [
 			'form' => [
 				'action' => BASEURL . '/edituser/',