From 7f0909ebfdabae460f7f9cbbcfb0c8f7a2db510e Mon Sep 17 00:00:00 2001
From: Dries Buytaert <dries@buytaert.net>
Date: Sun, 6 Nov 2005 11:38:56 +0000
Subject: [PATCH] - Patch #36407 by DriesK: make sure the private key is set.
---
includes/form.inc | 5 +++++
1 file changed, 5 insertions(+)
diff --git a/includes/form.inc b/includes/form.inc
index 2b88389d2cb2..039f73719b79 100644
--- a/includes/form.inc
+++ b/includes/form.inc
@@ -54,6 +54,11 @@ function drupal_get_form($form_id, &$form, $callback = NULL) {
$form['#type'] = 'form';
if (isset($form['#token'])) {
+ // Make sure that a private key is set:
+ if (!variable_get('drupal_private_key', '')) {
+ variable_set('drupal_private_key', mt_rand());
+ }
+
$form['form_token'] = array('#type' => 'hidden', '#value' => md5($_SERVER['REMOTE_ADDR'] . $form['#token'] . variable_get('drupal_private_key',
'')));
}
--
GitLab