diff options
| author | Marc Alexander <admin@m-a-styles.de> | 2019-11-12 21:47:41 +0100 |
|---|---|---|
| committer | Marc Alexander <admin@m-a-styles.de> | 2019-11-12 21:47:41 +0100 |
| commit | dba351702dbcd2dd157e8429199609fa27beee7d (patch) | |
| tree | 5dc02515137ba4e34288197188e558a3793eb3f7 /phpBB/includes/ucp/ucp_register.php | |
| parent | 04204c7ec6ecb2572cb41727140ae7c7644a4c63 (diff) | |
| download | forums-dba351702dbcd2dd157e8429199609fa27beee7d.tar forums-dba351702dbcd2dd157e8429199609fa27beee7d.tar.gz forums-dba351702dbcd2dd157e8429199609fa27beee7d.tar.bz2 forums-dba351702dbcd2dd157e8429199609fa27beee7d.tar.xz forums-dba351702dbcd2dd157e8429199609fa27beee7d.zip | |
[ticket/16210] Ensure terms of use is not skipped by enforcing form token
PHPBB3-16210
Diffstat (limited to 'phpBB/includes/ucp/ucp_register.php')
| -rw-r--r-- | phpBB/includes/ucp/ucp_register.php | 14 |
1 files changed, 6 insertions, 8 deletions
diff --git a/phpBB/includes/ucp/ucp_register.php b/phpBB/includes/ucp/ucp_register.php index 0e673cb692..54e418d58c 100644 --- a/phpBB/includes/ucp/ucp_register.php +++ b/phpBB/includes/ucp/ucp_register.php @@ -45,6 +45,11 @@ class ucp_register $change_lang = $request->variable('change_lang', ''); $user_lang = $request->variable('lang', $user->lang_name); + if ($agreed && !check_form_key('ucp_register')) + { + $agreed = false; + } + /** * Add UCP register data before they are assigned to the template or submitted * @@ -67,14 +72,7 @@ class ucp_register ); extract($phpbb_dispatcher->trigger_event('core.ucp_register_requests_after', compact($vars))); - if ($agreed) - { - add_form_key('ucp_register'); - } - else - { - add_form_key('ucp_register_terms'); - } + add_form_key('ucp_register'); if ($change_lang || $user_lang != $config['default_lang']) { |