#70 Token fix

GeniXCMS · Feb 12, 2017 · 64abcca · 64abcca
1 parent 5eb86f5
commit 64abcca
Show file tree

Hide file tree

Showing 4 changed files with 3 additions and 4 deletions.
diff --git a/inc/lib/Comments.class.php b/inc/lib/Comments.class.php
@@ -96,7 +96,7 @@ public static function addComment($vars)
 
         unset($vars['addComment']);
         $token = Typo::cleanX($vars['token']);
-        if (!isset($vars['token']) || !Token::isExist($token)) {
+        if (!isset($vars['token']) || !Token::validate($token)) {
             $alertDanger[] = TOKEN_NOT_EXIST;
         }
         if (!isset($vars['comments-msg']) || null == $vars['comments-msg'] || $vars['comments-msg'] == '<p><br></p>') {

diff --git a/inc/lib/Control/Backend/tags.control.php b/inc/lib/Control/Backend/tags.control.php
@@ -96,7 +96,6 @@
         if (isset($alertDanger)) {
             $data['alertDanger'] = $alertDanger;
         } else {
-            echo "Detel";
             Categories::delete(Typo::int($_GET['id']));
             $data['alertSuccess'][] = MSG_TAG_REMOVED;
         }

diff --git a/inc/mod/contact-form/inc/Contact.lib.php b/inc/mod/contact-form/inc/Contact.lib.php
@@ -24,7 +24,7 @@ public static function contactPage($data)
             switch ($_POST['sendMessage']){
                 case true:
                     $token = Typo::cleanX($_POST['token']);
-                    if (!isset($_POST['token']) || !Token::isExist($token)){
+                    if (!isset($_POST['token']) || !Token::validate($token)){
                         $alertDanger[] = TOKEN_NOT_EXIST;
                     }
                     if (Xaptcha::isEnable()) {

diff --git a/inc/mod/newsletter/options.php b/inc/mod/newsletter/options.php
@@ -3,7 +3,7 @@
 if (isset($_POST['sendmail'])) {
     // check token first
     $token = Typo::cleanX($_POST['token']);
-    if (!isset($_POST['token']) || !Token::isExist($token)) {
+    if (!isset($_POST['token']) || !Token::validate($token)) {
         $alertDanger[] = TOKEN_NOT_EXIST;
     }
     if (isset($alertDanger)) {