Welcome Guest, Not a member yet? Register   Sign In
Why does CSRF cookie name = token name?
#2

[eluser]arbme666[/eluser]
Ok I found this is Security.php in __construct()

Code:
// Append application specific cookie prefix to token name
$this->csrf_cookie_name = (config_item('cookie_prefix')) ? config_item('cookie_prefix').$this->csrf_token_name : $this->csrf_token_name;

Should it not be...

Code:
// Append application specific cookie prefix to token name
$this->csrf_token_name = (config_item('cookie_prefix')) ? config_item('cookie_prefix').$this->csrf_token_name : $this->csrf_token_name;

Thanks


Messages In This Thread
Why does CSRF cookie name = token name? - by El Forum - 02-04-2011, 02:06 PM
Why does CSRF cookie name = token name? - by El Forum - 02-04-2011, 02:26 PM



Theme © iAndrew 2016 - Forum software by © MyBB