diff options
| author | Andrew Dolgov <[email protected]> | 2020-09-17 10:04:00 +0300 |
|---|---|---|
| committer | Andrew Dolgov <[email protected]> | 2020-09-17 10:04:00 +0300 |
| commit | f72e6947d5048c4af5fcfc7bb8da64435bd6246a (patch) | |
| tree | f9b16b6f36fb755e14bd70a68ea8bc2eb3584afb /include | |
| parent | e3adacc5885e46b014236195b2f1eb265b3cc14e (diff) | |
use hash_equals() correctly
Diffstat (limited to 'include')
| -rw-r--r-- | include/functions.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/include/functions.php b/include/functions.php index bb7974f7f..298a77033 100644 --- a/include/functions.php +++ b/include/functions.php @@ -679,7 +679,7 @@ } function validate_csrf($csrf_token) { - return hash_equals($csrf_token, $_SESSION['csrf_token']); + return hash_equals($_SESSION['csrf_token'], $csrf_token); } function load_user_plugins($owner_uid, $pluginhost = false) { |