10483-Fixed csrf token on login after logout
This commit is contained in:
parent
c24bf70cc2
commit
bf307adb01
|
@ -359,6 +359,10 @@ if ($config['enterprise_installed']) {
|
|||
}
|
||||
|
||||
// CSRF validation.
|
||||
if (isset($_SESSION['csrf_code']) === true) {
|
||||
unset($_SESSION['csrf_code']);
|
||||
}
|
||||
|
||||
html_print_csrf_hidden();
|
||||
|
||||
echo '</form></div>';
|
||||
|
|
|
@ -1049,6 +1049,7 @@ if (isset($_GET['bye'])) {
|
|||
header_remove('Set-Cookie');
|
||||
setcookie(session_name(), $_COOKIE[session_name()], (time() - 4800), '/');
|
||||
|
||||
generate_csrf_code();
|
||||
// Process logout.
|
||||
include 'general/logoff.php';
|
||||
|
||||
|
|
Loading…
Reference in New Issue