Remove CSRF tokens from forms

lib/GaletteObjectsLend/Entity/Preferences.php

@@ -225,7 +225,7 @@ public function store(array $data): bool
             )->where->equalTo(self::PK, ':' . self::PK);
             $stmt = $this->zdb->sql->prepareStatementForSqlObject($update);
 
-            unset($data['csrf_value'], $data['csrf_name'], $data['GENERATED_CONTRIB_INFO_TEXT']);
+            unset($data['GENERATED_CONTRIB_INFO_TEXT']);
             foreach ($data as $key => $value) {
                 $stmt->execute(
                     [

templates/default/categories_list.html.twig

@@ -90,7 +90,6 @@
                 </div>
             </div>
         </div>
-        {% include "components/forms/csrf.html.twig" %}
     </form>
 {% endblock %}
 

templates/default/category_edit.html.twig

@@ -55,7 +55,6 @@
             <i class="save icon"></i> {{ _T("Save") }}
         </button>
         <input type="hidden" name="category_id" id="id" value="{{ category.getId() }}"/>
-        {% include "components/forms/csrf.html.twig" %}
     </div>
 </form>
 {% endblock %}

templates/default/objects_edit.html.twig

@@ -153,7 +153,6 @@
     {% endif %}
             <input type="hidden" name="object_id" value="{{ object.getId() }}">
         </div>
-        {% include "components/forms/csrf.html.twig" %}
     </form>
 
     {% if object.getId() %}
@@ -224,7 +223,6 @@
                     </button>
                 </div>
                 <input type="hidden" name="object_id" value="{{ object.object_id }}">
-                {% include "components/forms/csrf.html.twig" %}
             </form>
         </div>
     {% endif %}

templates/default/objects_list.html.twig

@@ -176,7 +176,6 @@
                 </div>
             </div>
         </div>
-        {% include "components/forms/csrf.html.twig" %}
     </form>
 
     {% if lendsprefs.VIEW_CATEGORY and categories|length > 0 %}

templates/default/preferences.html.twig

@@ -311,6 +311,5 @@
             <i class="save icon"></i> {{ _T("Save") }}
         </button>
     </div>
-    {% include "components/forms/csrf.html.twig" %}
 </form>
 {% endblock %}

templates/default/status_edit.html.twig

@@ -54,7 +54,6 @@
                 <i class="save icon"></i> {{ _T("Save") }}
             </button>
             <input type="hidden" name="id" id="id" value="{{ status.status_id }}"/>
-            {% include "components/forms/csrf.html.twig" %}
         </div>
     </form>
 {% endblock %}

templates/default/status_list.html.twig

@@ -126,7 +126,6 @@
                 </div>
             </div>
         </div>
-        {% include "components/forms/csrf.html.twig" %}
     </form>
 {% endblock %}
 

templates/default/take_object.html.twig

@@ -208,7 +208,6 @@
             <i class="save icon"></i> {% if takeorgive == 'take' %}{{ _T("Borrow object", "objectslend") }}{% else %}{{ _T("Return object", "objectslend") }}{% endif %}
         </button>
         <input type="hidden" name="mode" value="{% if ajax %}ajax{% endif %}"/>
-        {% include "components/forms/csrf.html.twig" %}
     </div>
 </form>
 {% endblock %}