Changeset 4493

Timestamp:

Dec 14, 2009, 11:38:04 PM (14 years ago)

Author:

nikrou

Message:

Bug 1328 : improve check function

File:

• trunk/admin/include/functions.php (modified) (1 diff)

trunk/admin/include/functions.php

@@ -35 +35 @@
   global $conf;
 
-  $token = hash_hmac('md5', session_id(), $conf['secret_key']);
-
-  if (!empty($_POST['pwg_token']) && ($_POST['pwg_token'] != $token))
-  {
-    access_denied();    
-  }
-  elseif (!empty($_GET['pwg_token']) && ($_GET['pwg_token'] != $token))
+  $valid_token = hash_hmac('md5', session_id(), $conf['secret_key']);
+  $given_token = null;
+
+  if (!empty($_POST['pwg_token']))
+  {
+    $given_token = $_POST['pwg_token'];
+  }
+  elseif (!empty($_GET['pwg_token']))
+  {
+    $given_token = $_GET['pwg_token'];
+  }
+  if ($given_token != $valid_token)
   {
     access_denied();