Fixes XSRF token generation for Xnet.
authorVincent Zanotti <vincent.zanotti@polytechnique.org>
Fri, 25 Apr 2008 16:20:55 +0000 (18:20 +0200)
committerVincent Zanotti <vincent.zanotti@polytechnique.org>
Fri, 25 Apr 2008 16:20:55 +0000 (18:20 +0200)
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
classes/session.php

index a1e72da..5a58059 100644 (file)
@@ -28,6 +28,7 @@ class Session
             $_SESSION['challenge'] = sha1(uniqid(rand(), true));
         }
         if (empty($_SESSION['xsrf_token'])) {
+            require_once 'xorg.misc.inc.php';
             $_SESSION['xsrf_token'] = rand_url_id();
         }
         if (!isset($_SESSION['perms']) || !($_SESSION['perms'] instanceof FlagSet)) {