database controller: CSRF cleanup
database controller: CSRF cleanup

These might have been exploitable to DoS the database.

Or in the case of get_backup(), cause strange things to happen by
reading from an arbitrary device file.

PeterRock/Ci-Bonfire3,PeterRock/Ci-Bonfire3,PeterRock/Ci-Bonfire3,kelaskakap/cms-api-unggun,kelaskakap/cms-api-unggun,kelaskakap/cms-api-unggun