Commit d0c3d657 by Taylor Otwell

Fix CSRF token bug.

parent 66f48b3f
...@@ -41,9 +41,9 @@ class Session { ...@@ -41,9 +41,9 @@ class Session {
// Form class and the "csrf" filter to protect the application from // Form class and the "csrf" filter to protect the application from
// cross-site request forgery attacks. The token is simply a long, // cross-site request forgery attacks. The token is simply a long,
// random string which should be posted with each request. // random string which should be posted with each request.
$token = Str::random(40); $csrf_token = Str::random(40);
static::$session = array('id' => Str::random(40), 'data' => compact('token')); static::$session = array('id' => Str::random(40), 'data' => compact('csrf_token'));
} }
} }
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment