beenull/forkbb
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Fix Core\Csrf for instant redirects

Browse source
This commit is contained in:
Visman 2021-02-20 16:36:28 +07:00
parent a472b859c6
commit 9410dba830
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
app/Core/Csrf.php
View file

@ -66,7 +66,7 @@ class Csrf
$result = \is_string($token) $result = \is_string($token)
&& \preg_match('%f(\d+)$%D', $token, $matches) && \preg_match('%f(\d+)$%D', $token, $matches)
&& $matches[1] + 0 < $now && $matches[1] + 0 <= $now
&& $matches[1] + 1800 >= $now && $matches[1] + 1800 >= $now
&& \hash_equals($this->create($marker, $args, $matches[1]), $token); && \hash_equals($this->create($marker, $args, $matches[1]), $token);