csrf verification on del actions

public_html/lists/admin/admin.php

@@ -115,6 +115,7 @@
 }
 
 if (!empty($_GET['delete'])) {
+    verifyCsrfGetToken();
     $delete = sprintf('%d', $_GET['delete']);
     // delete the index in delete
     echo s('Deleting')." $delete ..\n";

public_html/lists/admin/admins.php

@@ -40,6 +40,7 @@
 echo '<div class="pull-right fright">'.PageLinkActionButton('admin', s('Add new admin'), "start=$start".$remember_find).'</div><div class="clearfix"></div>';
 
 if (isset($_GET['delete']) && $_GET['delete']) {
+    verifyCsrfGetToken();
     // delete the index in delete
     if ($_GET['delete'] == $_SESSION['logindetails']['id']) {
         echo s('You cannot delete yourself')."\n";

public_html/lists/admin/bouncerule.php

@@ -11,6 +11,7 @@
 }
 
 if (isset($_GET['action']) && $_GET['action'] == 'next') {
+    verifyCsrfGetToken();
     if (isset($_GET['del'])) {
         Sql_Query(sprintf('delete from %s where id = %d', $GLOBALS['tables']['bounceregex'], $_GET['del']));
     } elseif (isset($_GET['activate'])) {

public_html/lists/admin/bouncerules.php

@@ -41,6 +41,7 @@
 }
 
 if (isset($_GET['del']) && $_GET['del']) {
+    verifyCsrfGetToken();
     Sql_Query(sprintf('delete from %s where id = %d', $GLOBALS['tables']['bounceregex'], $_GET['del']));
     Redirect('bouncerules'.$url);
 }