oqapi/webgui
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge branch 'master' of github.com:plainblack/webgui

Browse source
This commit is contained in:
Paul Driver 2011-01-10 12:32:19 -06:00
commit 702d00bb63
2 changed files with 57 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

3
lib/WebGUI/Session/Form.pm
View file

@ -186,10 +186,7 @@ the one in this user's current session.
sub validToken {
my ($self) = @_;
my $session = $self->session;
$session->log->info('HTTP method: '. $session->request->method);
$session->log->info('CSRF token: '. $session->scratch->get('webguiCsrfToken'));
return 0 unless $session->request->method eq 'POST';
$session->log->info('Web token: '. $self->param('webguiCsrfToken'));
return 0 unless $self->param('webguiCsrfToken') eq $session->scratch->get('webguiCsrfToken');
return 1;
}