Commit 43955298 authored by Ad Schellevis's avatar Ad Schellevis

(mvc) fix Phalcon csrf issue after upgrade >= 2.0.1

parent e4cd84cb
......@@ -97,7 +97,7 @@ class ApiControllerBase extends Controller
// check for valid csrf on post requests
$csrf_tokenkey = $this->request->getHeader('X_CSRFTOKENKEY');
$csrf_token = $this->request->getHeader('X_CSRFTOKEN');
$csrf_valid = $this->security->checkToken($csrf_tokenkey, $csrf_token);
$csrf_valid = $this->security->checkToken($csrf_tokenkey, $csrf_token, false);
if (($this->request->isPost() ||
$this->request->isPut() ||
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment