diff --git a/actions/login.php b/actions/login.php index 11cf1f02a6..6c6567b7ba 100644 --- a/actions/login.php +++ b/actions/login.php @@ -96,7 +96,6 @@ class LoginAction extends Action { // XXX: login throttle - // CSRF protection - token set in common_notice_form() $token = $this->trimmed('token'); if (!$token || $token != common_session_token()) { $this->clientError(_('There was a problem with your session token. '. diff --git a/actions/newnotice.php b/actions/newnotice.php index 61f0f83650..5e7691f33d 100644 --- a/actions/newnotice.php +++ b/actions/newnotice.php @@ -90,7 +90,7 @@ class NewnoticeAction extends Action $this->clientError(_('Not logged in.')); } else if ($_SERVER['REQUEST_METHOD'] == 'POST') { - // CSRF protection - token set in common_notice_form() + // CSRF protection $token = $this->trimmed('token'); if (!$token || $token != common_session_token()) { $this->clientError(_('There was a problem with your session token. '.