Merge pull request #2027 from Workoverflow/patch-1

lonnieezell · web-flow · commit 4ae9694c3cbd · 2019-09-01T21:58:57.000-05:00
Fix CSRF hash regeneration
diff --git a/system/Security/Security.php b/system/Security/Security.php
@@ -221,6 +221,7 @@ public function CSRFVerify(RequestInterface $request)
 		if ($this->CSRFRegenerate)
 		{
 			// Nothing should last forever
+			$this->CSRFHash = null;
 			unset($_COOKIE[$this->CSRFCookieName]);
 		}
 

Original file line number	Diff line number	Diff line change
`@@ -221,6 +221,7 @@ public function CSRFVerify(RequestInterface $request)`
`221`	`221`	`if ($this->CSRFRegenerate)`
`222`	`222`	`{`
`223`	`223`	`// Nothing should last forever`
	`224`	`+ $this->CSRFHash = null;`
`224`	`225`	`unset($_COOKIE[$this->CSRFCookieName]);`
`225`	`226`	`}`
`226`	`227`