Minahito
minah****@users*****
2006年 1月 12日 (木) 14:59:03 JST
Index: xoops2jp/html/class/XCube_ActionForm.class.php
diff -u xoops2jp/html/class/XCube_ActionForm.class.php:1.1.2.16 xoops2jp/html/class/XCube_ActionForm.class.php:1.1.2.17
--- xoops2jp/html/class/XCube_ActionForm.class.php:1.1.2.16 Thu Jan 12 14:27:46 2006
+++ xoops2jp/html/class/XCube_ActionForm.class.php Thu Jan 12 14:59:03 2006
@@ -44,7 +44,11 @@
function getToken()
{
srand (microtime() * 100000);
- return md5(XOOPS_SALT . uniqid(rand(), true));
+ $value = md5(XOOPS_SALT . uniqid(rand(), true));
+
+ $_SESSION['XCUBE_TOKEN'][$this->getTokenName()] = $value;
+
+ return $value;
}
function set()
@@ -114,7 +118,7 @@
if (!isset($_SESSION['XCUBE_TOKEN'][$this->getTokenName()])) {
$this->addErrorMessage(_TOKEN_ERROR);
}
- elseif (!$_SESSION['XCUBE_TOKEN'][$this->getTokenName()] != $token) {
+ elseif ($_SESSION['XCUBE_TOKEN'][$this->getTokenName()] != $token) {
$this->addErrorMessage(_TOKEN_ERROR);
}