diff options
| author | Dries Buytaert <dries@buytaert.net> | 2005-11-06 11:38:56 +0000 |
|---|---|---|
| committer | Dries Buytaert <dries@buytaert.net> | 2005-11-06 11:38:56 +0000 |
| commit | 7f0909ebfdabae460f7f9cbbcfb0c8f7a2db510e (patch) | |
| tree | 1b6f913b4bc776c08df40c0d50039d4c9bd986f0 /includes | |
| parent | e4325eb03afea5fcd560fe832b82207a490df359 (diff) | |
| download | brdo-7f0909ebfdabae460f7f9cbbcfb0c8f7a2db510e.tar.gz brdo-7f0909ebfdabae460f7f9cbbcfb0c8f7a2db510e.tar.bz2 | |
- Patch #36407 by DriesK: make sure the private key is set.
Diffstat (limited to 'includes')
| -rw-r--r-- | includes/form.inc | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/includes/form.inc b/includes/form.inc index 2b88389d2..039f73719 100644 --- a/includes/form.inc +++ b/includes/form.inc @@ -54,6 +54,11 @@ function drupal_get_form($form_id, &$form, $callback = NULL) { $form['#type'] = 'form'; if (isset($form['#token'])) { + // Make sure that a private key is set: + if (!variable_get('drupal_private_key', '')) { + variable_set('drupal_private_key', mt_rand()); + } + $form['form_token'] = array('#type' => 'hidden', '#value' => md5($_SERVER['REMOTE_ADDR'] . $form['#token'] . variable_get('drupal_private_key', ''))); } |