From 0c38dc84561da4ab97c6463e4214cd9c5ea68319 Mon Sep 17 00:00:00 2001
From: Jacek Tomasiak <jacek.tomasiak@gmail.com>
Date: Tue, 11 May 2021 09:35:39 +0200
Subject: [PATCH] Improve missing token check
Avoid "E_NOTICE (8) (classes/userhelper.php:78) Undefined index:
csrf_token" in logs.
---
classes/userhelper.php | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/classes/userhelper.php b/classes/userhelper.php
index 0bf67243e..1cdd320a1 100644
--- a/classes/userhelper.php
+++ b/classes/userhelper.php
@@ -75,7 +75,7 @@ class UserHelper {
$_SESSION["auth_module"] = false;
- if (!$_SESSION["csrf_token"])
+ if (empty($_SESSION["csrf_token"]))
$_SESSION["csrf_token"] = bin2hex(get_random_bytes(16));
$_SESSION["ip_address"] = UserHelper::get_user_ip();
--
GitLab