From 5dabb62d678b8a3db4ea8600916fd95225e0ddf6 Mon Sep 17 00:00:00 2001 From: brettp Date: Wed, 17 Feb 2010 14:59:02 +0000 Subject: Fixes #1527: Logout doens't require an action token. This is a temporary fix until #1509 is implemented. git-svn-id: http://code.elgg.org/elgg/trunk@3943 36083f99-b078-4883-b0ff-0f9b5a30f544 --- engine/lib/actions.php | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'engine/lib/actions.php') diff --git a/engine/lib/actions.php b/engine/lib/actions.php index bd3bdb80a..278194ac3 100644 --- a/engine/lib/actions.php +++ b/engine/lib/actions.php @@ -29,7 +29,8 @@ function action($action, $forwarder = "") { // UI without tokens. (And for installation because of session_id problems) $exceptions = array( 'systemsettings/install', - 'admin/plugins/disable' + 'admin/plugins/disable', + 'logout' ); if (!in_array($action, $exceptions)) { -- cgit v1.2.3