Author: chabotc
Date: Sat Mar  7 11:17:01 2009
New Revision: 751247

URL: http://svn.apache.org/viewvc?rev=751247&view=rev
Log:
SHINDIG-966 - double decoded the security token

Modified:
    incubator/shindig/trunk/php/src/gadgets/GadgetContext.php

Modified: incubator/shindig/trunk/php/src/gadgets/GadgetContext.php
URL: 
http://svn.apache.org/viewvc/incubator/shindig/trunk/php/src/gadgets/GadgetContext.php?rev=751247&r1=751246&r2=751247&view=diff
==============================================================================
--- incubator/shindig/trunk/php/src/gadgets/GadgetContext.php (original)
+++ incubator/shindig/trunk/php/src/gadgets/GadgetContext.php Sat Mar  7 
11:17:01 2009
@@ -292,9 +292,6 @@
     if (! isset($token) || $token == '') {
       $token = isset($_POST['st']) ? $_POST['st'] : '';
     }
-    if (count(explode(':', $token)) != 6) {
-      $token = urldecode(base64_decode($token));
-    }
     if (empty($token)) {
       throw new Exception("Missing or invalid security token");
     }


Reply via email to