ncp-web: force reload CSRF tokens every timev0.53.23

2 files changed, 3 insertions, 2 deletions

diff --git a/ncp-web/index.php b/ncp-web/index.php
index 814420c6..f06aa1f3 100644
--- a/ncp-web/index.php
+++ b/ncp-web/index.php
@@ -36,7 +36,8 @@
     header("X-Robots-Tag: none");
     header("X-Permitted-Cross-Domain-Policies: none");
     header("X-Frame-Options: DENY");
-    header("Cache-Control: max-age=15778463");
+    header("Cache-Control: no-cache");
+    header('Pragma: no-cache');
     ini_set('session.cookie_httponly', 1);
     if (isset($_SERVER['HTTPS']))
       ini_set('session.cookie_secure', 1);
diff --git a/ncp-web/ncp.js b/ncp-web/ncp.js
index cac619b4..81820f0e 100644
--- a/ncp-web/ncp.js
+++ b/ncp-web/ncp.js
@@ -344,7 +344,7 @@ $(function()
     {
       var ret = $.parseJSON( result );
       if ( ret.token )
-        $('#csrf-token').set( { value: ret.token } );
+        $('#csrf-token-dash').set( { value: ret.token } );
       $('#loading-info-gif').hide();
       $('#dashboard-table').ht( ret.table );
       $('#dashboard-suggestions').ht( ret.suggestions );