reverted "[Form] fixed default CSRF token generation as a token must be tied to the user somewhat"

This reverts commit d326c398e2.
This commit is contained in:
Fabien Potencier 2010-09-10 14:16:59 +02:00
parent d326c398e2
commit 0de1c08d8d

View File

@ -60,7 +60,7 @@ class Form extends FieldGroup
if (self::$defaultCsrfSecret !== null) {
$this->setCsrfSecret(self::$defaultCsrfSecret);
} else {
$this->setCsrfSecret(md5(__FILE__.session_id()));
$this->setCsrfSecret(md5(__FILE__.php_uname()));
}
if (self::$defaultCsrfProtection !== false) {