Welcome to Geeklog, Anonymous Wednesday, January 15 2025 @ 07:39 am EST

Comments for Geeklog 1.7.0 BETA 1

Geeklog 1.7.0 BETA 1 | 3 comments | Create New Account

The following comments are owned by whomever posted them. This site is not responsible for what they say.

expiring CSRF token

Authored by: ::Ben on Sunday, April 04 2010 @ 11:17 am EDT

Good news : ...Geeklog 1.7.0 addresses the problem with the expiring CSRF token: Now when the token expires, you will be asked for your password again...

but just a question: How will it work for anonymous user?
---
Support and French community | http://geeklog.fr

---
I'm available to customise your themes or plugins for your Geeklog CMS

expiring CSRF token

Authored by: Dirk on Sunday, April 04 2010 @ 11:38 am EDT

Anonymous users never use a CSRF token. The whole point of the token is to make it harder to execute a request with someone else's permissions. Anonymous users don't have any special rights in Geeklog that are worth exploiting.

expiring CSRF token

Authored by: ::Ben on Sunday, April 04 2010 @ 01:13 pm EDT

Oups... I've never try anonymous feature :)

Thanks.---
Support and French community | http://geeklog.fr

---
I'm available to customise your themes or plugins for your Geeklog CMS

Search

Resources

About

Getting started

Support

Development

Topics

User Functions

What's New

Articles last 4 weeks

Comments last 4 weeks

Pages last 4 weeks

Links last 4 weeks

Downloads last 4 weeks