diff options
| author | Vincent Petry <pvince81@owncloud.com> | 2014-06-02 13:27:20 +0400 |
|---|---|---|
| committer | Vincent Petry <pvince81@owncloud.com> | 2014-06-02 13:27:20 +0400 |
| commit | 4e957c7b1881ec1583fd716f0a138811e9951756 (patch) | |
| tree | 7647ff8010cce4a44afb40f4997e24ef9d74c903 /lib/private/user.php | |
| parent | 09ab642d2b6b98e4188bdefa004a27c19577ec90 (diff) | |
| parent | f8cb8f480346fb36ca18258b902a7157265c8ac7 (diff) | |
Merge pull request #8443 from owncloud/csrf-on-login-and-logout
Add CSRF check on login and logout
Diffstat (limited to 'lib/private/user.php')
| -rw-r--r-- | lib/private/user.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/private/user.php b/lib/private/user.php index 5d3ebb57c8c..a8431af97fd 100644 --- a/lib/private/user.php +++ b/lib/private/user.php @@ -365,7 +365,7 @@ class OC_User { return $backend->getLogoutAttribute(); } - return 'href="' . link_to('', 'index.php') . '?logout=true"'; + return 'href="' . link_to('', 'index.php') . '?logout=true&requesttoken=' . OC_Util::callRegister() . '"'; } /** |