avoid undefined index
Hanno commited on 2018-07-29 09:09:05
Zeige 1 geänderte Dateien mit 2 Einfügungen und 1 Löschungen.
- inc/base.php 2280fbe..9bd43dc
| ... | ... |
@@ -260,7 +260,8 @@ function are_you_sure($query_string, $question) |
| 260 | 260 |
function user_is_sure() |
| 261 | 261 |
{
|
| 262 | 262 |
if (isset($_POST['really'])) {
|
| 263 |
- if ($_POST['random_token'] == $_SESSION['are_you_sure_token']) {
|
|
| 263 |
+ if (array_key_exists('random_token', $_POST) &&
|
|
| 264 |
+ ($_POST['random_token'] == $_SESSION['are_you_sure_token'])) {
|
|
| 264 | 265 |
return true; |
| 265 | 266 |
} else {
|
| 266 | 267 |
system_failure("Possible Cross-site-request-forgery detected!");
|
| 267 | 268 |