pi-hole/web
1
0
Fork 0
mirror of https://github.com/pi-hole/web.git synced 2024-12-06 19:36:21 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Merge pull request #832 from pi-hole/tweak/wrong-token-message

Browse Source 
Improve "Wrong Token." message
This commit is contained in:
Mark Drobnak
2018-08-24 14:25:52 -05:00
committed by GitHub
parent 81561f5da5 d67f8c66ee
commit ae3fdb40ec
1 changed files with 10 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/pi-hole/php/auth.php
+10 -2
View File
@@ -93,8 +93,16 @@ function check_csrf($token) {
session_start();
}
if(!isset($_SESSION['token']) || empty($token) || !hash_equals($_SESSION['token'], $token)) {
log_and_die("Wrong token");
if(!isset($_SESSION['token'])) {
log_and_die("Session expired! Please re-login on the Pi-hole dashboard.");
}
if(empty($token)) {
log_and_die("Empty token! Check if cookies are enabled on your system.");
}
if(!hash_equals($_SESSION['token'], $token)) {
log_and_die("Wrong token! Please re-login on the Pi-hole dashboard.");
}
}