Commit d0c3d657 authored by Taylor Otwell's avatar Taylor Otwell

Fix CSRF token bug.

parent 66f48b3f
......@@ -41,9 +41,9 @@ class Session {
// Form class and the "csrf" filter to protect the application from
// cross-site request forgery attacks. The token is simply a long,
// random string which should be posted with each request.
$token = Str::random(40);
$csrf_token = Str::random(40);
static::$session = array('id' => Str::random(40), 'data' => compact('token'));
static::$session = array('id' => Str::random(40), 'data' => compact('csrf_token'));
}
}
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment