1
0
mirror of https://git.tt-rss.org/git/tt-rss.git synced 2025-12-13 04:15:55 +00:00

Merge pull request 'Improve missing token check' (#36) from skazi/tt-rss:quiet-csrf into master

Reviewed-on: https://git.tt-rss.org/fox/tt-rss/pulls/36
This commit is contained in:
fox
2021-05-11 11:34:13 +03:00

View File

@@ -75,7 +75,7 @@ class UserHelper {
$_SESSION["auth_module"] = false;
if (!$_SESSION["csrf_token"])
if (empty($_SESSION["csrf_token"]))
$_SESSION["csrf_token"] = bin2hex(get_random_bytes(16));
$_SESSION["ip_address"] = UserHelper::get_user_ip();