From 39060653573bf4dd51e891aecdb571c78a866675 Mon Sep 17 00:00:00 2001 From: Cash Costello Date: Mon, 5 Oct 2009 23:20:10 +0000 Subject: not using action token validation for image download --- views/default/tidypics/image_menu.php | 5 +---- views/default/tidypics/tagging.php | 1 + 2 files changed, 2 insertions(+), 4 deletions(-) (limited to 'views/default/tidypics') diff --git a/views/default/tidypics/image_menu.php b/views/default/tidypics/image_menu.php index cb004395e..299f4b026 100644 --- a/views/default/tidypics/image_menu.php +++ b/views/default/tidypics/image_menu.php @@ -43,10 +43,7 @@ } if (get_plugin_setting('download_link', 'tidypics') != "disabled") { - $ts = time(); - $token = generate_action_token($ts); - - $download_url = $vars['url'] . "action/tidypics/download?file_guid=" . $image_guid . "&__elgg_token={$token}&__elgg_ts={$ts}"; + $download_url = $vars['url'] . "action/tidypics/download?file_guid=" . $image_guid; ?>
  • +

    -- cgit v1.2.3