Changeset 1356

Timestamp:

01/29/08 00:08:53 (7 months ago)

Author:

Neal

Message:

Added a new parameter to the logout URL to prevent a CSRF annoyance.

Files:

• trunk/upload/include/functions.php (modified) (2 diffs)
• trunk/upload/login.php (modified) (1 diff)

trunk/upload/include/functions.php

@@ -296 +296 @@
-
-                        $links[] = '<li id="navprofile"><a href="profile.php?id='.$pun_user['id'].'">'.$lang_common['Profile'].'</a>';
-
+&amp;csrf_token='.sha1($pun_user['id'].sha1(get_remote_address())).'
-                }
-                else
@@ -303 +303 @@
-                        $links[] = '<li id="navprofile"><a href="profile.php?id='.$pun_user['id'].'">'.$lang_common['Profile'].'</a>';
-                        $links[] = '<li id="navadmin"><a href="admin_index.php">'.$lang_common['Admin'].'</a>';
-
+&amp;csrf_token='.sha1($pun_user['id'].sha1(get_remote_address())).'
-                }
-        }

trunk/upload/login.php

@@ -85 +85 @@
-else if ($action == 'out')
-{
-
+ || !isset($_GET['csrf_token']) || $_GET['csrf_token'] != sha1($pun_user['id'].sha1(get_remote_address()))
-        {
-                header('Location: index.php');