parent
d4426e41d2
commit
995d6bfccb
2 changed files with 21 additions and 0 deletions
@ -0,0 +1,10 @@ |
|||||||
|
--- htdocs/main.inc.php.orig 2021-04-09 19:02:49.957818778 +0200
|
||||||
|
+++ htdocs/main.inc.php 2021-04-21 18:10:31.597094173 +0200
|
||||||
|
@@ -455,6 +455,7 @@
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
+ $_GET['token'] = $_SESSION['token']; // Tmp workaround for https://github.com/Dolibarr/dolibarr/issues/16096
|
||||||
|
if (GETPOSTISSET('token') && GETPOST('token', 'alpha') != $_SESSION['token'])
|
||||||
|
{
|
||||||
|
dol_syslog("--- Access to ".$_SERVER["PHP_SELF"]." refused due to invalid token, so we disable POST and some GET parameters - referer=".$_SERVER['HTTP_REFERER'].", action=".GETPOST('action', 'aZ09').", _GET|POST['token']=".GETPOST('token', 'alpha').", _SESSION['token']=".$_SESSION['token'], LOG_WARNING);
|
Loading…
Reference in new issue