fix: Placeholder resolution display + CSRF token on Run Backup button #125

Merged

jmiller merged 2 commits from fix/placeholder-resolution-display into main 2026-06-23 16:36:46 +00:00

Conversation 0 Commits 2 Files Changed 13

+69 -12

jmiller commented 2026-06-23 16:36:09 +00:00

Owner

Copy Link

Copy Source

Two fixes

1. Placeholder resolution display

Below the Backup Directory input, shows badges for each placeholder in use with its resolved value:

• [HOME] = /home/mokoconsulting_dev
• [host] = suite.dev.mokoconsulting.tech
• Plus the full resolved path: Resolves to: /home/.../backups
• Updates live as user types or clicks placeholder pills

2. CSRF token fix for Run Backup button

The "Run Backup Now" button on profile edit sends the CSRF token as a GET parameter (link button). BackupsController::start() was using $this->checkToken() which only checks POST. Now checks both GET and POST.

Test Plan

• Edit profile with [HOME]/backups → see resolved values below
• Click placeholder pills → resolution updates
• Click "Run Backup Now" on profile edit → no CSRF error

## Two fixes ### 1. Placeholder resolution display Below the Backup Directory input, shows badges for each placeholder in use with its resolved value: - `[HOME] = /home/mokoconsulting_dev` - `[host] = suite.dev.mokoconsulting.tech` - Plus the full resolved path: `Resolves to: /home/.../backups` - Updates live as user types or clicks placeholder pills ### 2. CSRF token fix for Run Backup button The "Run Backup Now" button on profile edit sends the CSRF token as a GET parameter (link button). `BackupsController::start()` was using `$this->checkToken()` which only checks POST. Now checks both GET and POST. ## Test Plan - [ ] Edit profile with `[HOME]/backups` → see resolved values below - [ ] Click placeholder pills → resolution updates - [ ] Click "Run Backup Now" on profile edit → no CSRF error

jmiller added the component: admin label 2026-06-23 16:36:09 +00:00

jmiller added 1 commit 2026-06-23 16:36:10 +00:00

fix: placeholder resolution display + CSRF token on Run Backup button ... fc41e1801a

FolderPickerField: shows resolved placeholder values below input as
badges (e.g. [HOME]=/home/user, [host]=example.com), plus full
resolved path. Updates live as user types.

BackupsController::start(): accept CSRF token from both GET and POST
so the "Run Backup Now" link button on profile edit works without
triggering "security token did not match" error.

jmiller added 1 commit 2026-06-23 16:36:13 +00:00

chore(version): pre-release bump to 01.38.02-dev [skip ci] e7f165ac96

jmiller merged commit 044e57adf3 into main 2026-06-23 16:36:46 +00:00

jmiller deleted branch fix/placeholder-resolution-display 2026-06-23 16:36:49 +00:00

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

component: admin

Admin UI and views

component: api

REST API

component: engine

Backup/restore engine

component: remote

Remote storage (FTP/GDrive)

component: scheduler

Scheduled tasks

No labels component: admin

Priority -

Type -

Milestone

No items

No Milestone

Assignees

Clear assignees

jmiller (Jonathan Miller)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: MokoConsulting/MokoSuiteBackup#125