add list

list.php

@@ -5,6 +5,8 @@ require_once 'action.php';
 require_once 'db.php';
 require_once 'token.php';
 
+$token = substr(trim($_GET['token']),0,25);
+
 if (!(new token)->isUser($token)) {
     echo "user access denied";
     exit;