1
0
mirror of https://git.tt-rss.org/git/tt-rss.git synced 2025-12-13 06:55:56 +00:00

use hash_equals() correctly

This commit is contained in:
Andrew Dolgov
2020-09-17 10:04:00 +03:00
parent e3adacc588
commit f72e6947d5

View File

@@ -679,7 +679,7 @@
}
function validate_csrf($csrf_token) {
return hash_equals($csrf_token, $_SESSION['csrf_token']);
return hash_equals($_SESSION['csrf_token'], $csrf_token);
}
function load_user_plugins($owner_uid, $pluginhost = false) {