From e5b0e5f76c0695a01d13c55147a8287df8750594 Mon Sep 17 00:00:00 2001
From: Dries Buytaert <dries@buytaert.net>
Date: Sat, 6 Sep 2008 08:36:22 +0000
Subject: - Patch #302763 by Dave Reid, Rob Loach: replace time() by
 ['REQUEST_TIME'] as per Rasmus' suggestion.  Removed drupal_referrer() for
 consistency.

---
 modules/user/user.pages.inc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'modules/user/user.pages.inc')

diff --git a/modules/user/user.pages.inc b/modules/user/user.pages.inc
index df0c37fcc..be757643b 100644
--- a/modules/user/user.pages.inc
+++ b/modules/user/user.pages.inc
@@ -84,7 +84,7 @@ function user_pass_reset(&$form_state, $uid, $timestamp, $hashed_pass, $action =
   else {
     // Time out, in seconds, until login URL expires. 24 hours = 86400 seconds.
     $timeout = 86400;
-    $current = time();
+    $current = $_SERVER['REQUEST_TIME'];
     // Some redundant checks for extra security ?
     if ($timestamp < $current && $account = user_load(array('uid' => $uid, 'status' => 1)) ) {
       // No time out for first time login.
-- 
cgit v1.2.3