IMPORTANT: parent::handlePost() in NewnoticeAction

otherwise we don't do csrf checking etc...

diff --git a/actions/newnotice.php b/actions/newnotice.php
index 7839074cd16d8de5f1f3661a041b0b77b462d518..ad06c7e266b99cd11e2cf4c5934baf2773d760d8 100644 (file)
--- a/actions/newnotice.php
+++ b/actions/newnotice.php
@@ -101,6 +101,8 @@ class NewnoticeAction extends FormAction
      */
     protected function handlePost()
     {
      */
     protected function handlePost()
     {

+        parent::handlePost();
+

         assert($this->scoped); // XXX: maybe an error instead...
         $user = $this->scoped->getUser();
         $content = $this->trimmed('status_textarea');
         assert($this->scoped); // XXX: maybe an error instead...
         $user = $this->scoped->getUser();
         $content = $this->trimmed('status_textarea');