search

arsava / dokuwiki-template-vector

"vector" brings you the MediaWiki/Wikipedia 2010 look and feel for DokuWiki.
http://www.dokuwiki.org/template:vector
GNU General Public License v2.0
38 stars 9 forks source link

Update main.php #69

Closed jheim2 closed 1 year ago

jheim2 commented 1 year ago

adding security token to make logout work again.

NobleKangaroo commented 1 year ago

Confirmed still an issue on Dokuwiki 2022-07-31a "Igor"

Users cannot log out, and receive the following error:

Security Token did not match. Possible CSRF attack.

image

Related: https://github.com/splitbrain/dokuwiki/issues/3766 Related: https://forum.dokuwiki.org/d/20248-security-token-did-not-match-possible-csrf-attack-cannot-log-out/7 Caused by: https://github.com/splitbrain/dokuwiki/commit/6a25531dc896167cc6e598fa780ee6840559aeea

array("do" => "logout") should read array("do" => "logout", "sectok" => getSecurityToken()) below: https://github.com/arsava/dokuwiki-template-vector/blob/61982192220ff1fcc6f7930ba5feb297b5c2111a/main.php#L684

Thanks for the PR @jheim2 - hopefully this can be approved for future releases.