From 552b5e5e7aec5d50c192ce40e18bdce63f653503 Mon Sep 17 00:00:00 2001
From: Dries Buytaert <dries@buytaert.net>
Date: Wed, 25 Jan 2006 08:40:53 +0000
Subject: - Patch #46227 by yogadex: fixed problem with form validation.

---
 includes/form.inc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'includes')

diff --git a/includes/form.inc b/includes/form.inc
index 8d98dc0ff..ab04bbcc9 100644
--- a/includes/form.inc
+++ b/includes/form.inc
@@ -121,7 +121,7 @@ function drupal_validate_form($form_id, &$form, $callback = NULL) {
   global $form_values;
 
   if (isset($form['#token'])) {
-    if ($form_values['form_token'] != md5($_SERVER['REMOTE_ADDR'] . $form['#token'] . variable_get('drupal_private_key', ''))) {
+    if ($form_values['form_token'] != md5(session_id() . $form['#token'] . variable_get('drupal_private_key', ''))) {
       // setting this error will cause the form to fail validation
       form_set_error('form_token', t('Validation error, please try again.  If this error persists, please contact the site administrator.'));
     }
-- 
cgit v1.2.3