mirror_php/winter
1
0
Fork 0
mirror of https://github.com/wintercms/winter.git synced 2024-06-28 05:33:29 +02:00
Code Issues Projects Releases Wiki Activity

Fixes exception on empty token

Browse Source
This commit is contained in:
Samuel Georges 2017-11-02 19:52:54 +11:00
parent d164145229
commit e6de2a5521
2 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
modules/backend/classes/Controller.php
View File

@ -691,6 +691,10 @@ class Controller extends Extendable
$token = Request::input('_token') ?: Request::header('X-CSRF-TOKEN'); $token = Request::input('_token') ?: Request::header('X-CSRF-TOKEN');
if (!strlen($token)) {
return false;
}
return hash_equals( return hash_equals(
Session::token(), Session::token(),
$token $token

4
modules/cms/classes/Controller.php
View File

@ -1379,6 +1379,10 @@ class Controller
$token = Request::input('_token') ?: Request::header('X-CSRF-TOKEN'); $token = Request::input('_token') ?: Request::header('X-CSRF-TOKEN');
if (!strlen($token)) {
return false;
}
return hash_equals( return hash_equals(
Session::token(), Session::token(),
$token $token