From: Kai Blin <kai@samba.org>
Date: Fri, 8 Jul 2011 13:03:44 +0000 (+0200)
Subject: s3 swat: Add XSRF protection to wizard page
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=5aae5319d34a9bf8c9f1f28883ac77a053b9a217;p=thirdparty%2Fsamba.git

s3 swat: Add XSRF protection to wizard page

Signed-off-by: Kai Blin <kai@samba.org>
(cherry picked from commit eb22fd73060534700d514ec295985549131c7569)
---

diff --git a/source/web/swat.c b/source/web/swat.c
index b7eec4a88aa..b6e0c0f9d8a 100644
--- a/source/web/swat.c
+++ b/source/web/swat.c
@@ -751,6 +751,11 @@ static void wizard_page(void)
 	int have_home = -1;
 	int HomeExpo = 0;
 	int SerType = 0;
+	const char form_name[] = "wizard";
+
+	if (!verify_xsrf_token(form_name)) {
+		goto output_page;
+	}
 
 	if (cgi_variable("Rewrite")) {
 		(void) rewritecfg_file();
@@ -841,10 +846,12 @@ static void wizard_page(void)
 		winstype = 3;
 
 	role = lp_server_role();
-	
+
+output_page:
 	/* Here we go ... */
 	printf("<H2>%s</H2>\n", _("Samba Configuration Wizard"));
 	printf("<form method=post action=wizard>\n");
+	print_xsrf_token(cgi_user_name(), cgi_user_pass(), form_name);
 
 	if (have_write_access) {
 		printf("%s\n", _("The \"Rewrite smb.conf file\" button will clear the smb.conf file of all default values and of comments."));