In OneThird CMS, improve security, do not allow the post of data by default
And plug-ins, if you want to create a program to post the data in the template function, you will be POST Then security error use the form tag
Is to avoid this, please set up a token in the form
＜input type='hidden' name='xtoken' value='｛$params['login_user']['meta']['magic_str']｝' /＞
However, the token will not be created only at the time of login, to post the data in a non-login state such as a contact form, please insert before processing the following code:
if (!check_right()) {
To generate the // token; provide_onethird_object ()
}