remove xsrf check

This commit is contained in:
Nicolas Lœuillet 2013-08-05 12:53:56 +02:00
parent 4d0e254491
commit b161295d0b

View file

@ -11,12 +11,12 @@
include dirname(__FILE__).'/inc/poche/config.inc.php'; include dirname(__FILE__).'/inc/poche/config.inc.php';
#XSRF protection with token #XSRF protection with token
if (!empty($_POST)) { // if (!empty($_POST)) {
if (!Session::isToken($_POST['token'])) { // if (!Session::isToken($_POST['token'])) {
die(_('Wrong token')); // die(_('Wrong token'));
} // }
unset($_SESSION['tokens']); // unset($_SESSION['tokens']);
} // }
$referer = empty($_SERVER['HTTP_REFERER']) ? '' : $_SERVER['HTTP_REFERER']; $referer = empty($_SERVER['HTTP_REFERER']) ? '' : $_SERVER['HTTP_REFERER'];
$view = Tools::checkVar('view', 'home'); $view = Tools::checkVar('view', 'home');