public/tt-rss
1
0
Fork 0
mirror of https://git.tt-rss.org/git/tt-rss.git synced 2025-12-13 13:25:54 +00:00
Code Issues Releases Wiki Activity

public/logout: require valid CSRF token

Browse Source
This commit is contained in:
Andrew Dolgov
2020-09-15 16:59:11 +03:00
parent cbcb10a272
commit 154417d80b
3 changed files with 28 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
classes/handler/public.php
View File

@@ -283,8 +283,10 @@ class Handler_Public extends Handler {
}
function logout() {
logout_user();
header("Location: index.php");
if ($_POST["csrf_token"] == $_SESSION["csrf_token"]) {
logout_user();
header("Location: index.php");
}
}
function share() {