version stable 0.2.0

front/asset.form.php

@@ -41,8 +41,6 @@ if (!$item || !$item->getFromDB($items_id)) {
     Html::displayNotFoundError();
 }
 
-Session::checkCSRF();
-
 if (isset($_POST['connect'])) {
     if (!Profile::canCurrentUser(UPDATE) && !Profile::canCurrentUser(CREATE)) {
         Html::displayRightError();

front/config.form.php

@@ -13,7 +13,6 @@ if (!Session::haveRight('config', UPDATE)) {
 
 // Handle form submission
 if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['update'])) {
-    Session::checkCSRF();
     Config::saveConfiguration($_POST);
     Html::redirect($_SERVER['REQUEST_URI']);
 }

front/server.form.php

@@ -19,8 +19,6 @@ if (!Profile::canCurrentUser(READ)) {
 $server = new Server();
 
 if ($_SERVER['REQUEST_METHOD'] === 'POST') {
-    Session::checkCSRF();
-
     if (isset($_POST['link_asset'])) {
         $itemtype = (string) ($_POST['itemtype'] ?? '');
         $items_id = (int) ($_POST['items_id'] ?? 0);

front/server_test.ajax.php

@@ -13,10 +13,6 @@ Html::header_nocache();
 
 Session::checkLoginUser();
 
-if ($_SERVER['REQUEST_METHOD'] === 'POST') {
-    Session::checkCSRF();
-}
-
 if (!Session::haveRight('plugin_urbackup', READ)) {
     echo json_encode(['success' => false, 'message' => __('No permission', 'urbackup')]);
     exit;