Welcome Guest, Not a member yet? Register   Sign In
_csrf_set_hash() in core security class bug
#1

[eluser]Unknown[/eluser]
When _csrf_set_hash() is call for the very first time a has is generate with


return $this->_csrf_hash = md5(uniqid(rand(), TRUE));


however this has is never set to the cookie




Theme © iAndrew 2016 - Forum software by © MyBB