Merge branch 'ent-10483-falla-el-csrf-en-login-despues-de-hacer-logout' into 'develop'
Draft: Ent 10483 falla el csrf en login despues de hacer logout See merge request artica/pandorafms!5550
This commit is contained in:
commit
0fa39af4a9
|
@ -359,6 +359,10 @@ if ($config['enterprise_installed']) {
|
|||
}
|
||||
|
||||
// CSRF validation.
|
||||
if (isset($_SESSION['csrf_code']) === true) {
|
||||
unset($_SESSION['csrf_code']);
|
||||
}
|
||||
|
||||
html_print_csrf_hidden();
|
||||
|
||||
echo '</form></div>';
|
||||
|
|
|
@ -1049,6 +1049,7 @@ if (isset($_GET['bye'])) {
|
|||
header_remove('Set-Cookie');
|
||||
setcookie(session_name(), $_COOKIE[session_name()], (time() - 4800), '/');
|
||||
|
||||
generate_csrf_code();
|
||||
// Process logout.
|
||||
include 'general/logoff.php';
|
||||
|
||||
|
|
Loading…
Reference in New Issue