From f6cd767b9f40459cd214b0664ae60d86cc3e22e2 Mon Sep 17 00:00:00 2001 From: Andrew Dolgov Date: Tue, 3 Jan 2012 01:37:51 +0400 Subject: [PATCH] fix savefeedorder not working due to CSRF check (refs #366) --- classes/pref_feeds.php | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/classes/pref_feeds.php b/classes/pref_feeds.php index d326d2278..978a848e9 100644 --- a/classes/pref_feeds.php +++ b/classes/pref_feeds.php @@ -2,7 +2,8 @@ class Pref_Feeds extends Protected_Handler { function csrf_ignore($method) { - $csrf_ignored = array("index", "getfeedtree", "add", "editcats", "editfeed"); + $csrf_ignored = array("index", "getfeedtree", "add", "editcats", "editfeed", + "savefeedorder"); return array_search($method, $csrf_ignored) !== false; }