|
@@ -173,7 +173,7 @@ function render_page($user, $TAB, $page)
|
|
|
// Usage: verify_csrf($_POST) or verify_csrf($_GET); Use verify_csrf($_POST,true) to return on failure instead of redirect
|
|
// Usage: verify_csrf($_POST) or verify_csrf($_GET); Use verify_csrf($_POST,true) to return on failure instead of redirect
|
|
|
function verify_csrf($method, $return = false)
|
|
function verify_csrf($method, $return = false)
|
|
|
{
|
|
{
|
|
|
- if ($method['token'] !== $_SESSION['token'] || empty($method['token'] || empty($_SESSION['token'])) {
|
|
|
|
|
|
|
+ if ($method['token'] !== $_SESSION['token'] || empty($method['token']) || empty($_SESSION['token'])) {
|
|
|
if ($return === true) {
|
|
if ($return === true) {
|
|
|
return false;
|
|
return false;
|
|
|
} else {
|
|
} else {
|