check security token on logout. fixes #3561

dokuwiki · Dec 13, 2021 · 6a25531 · 6a25531
1 parent 22b04d8
commit 6a25531
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/inc/Action/Logout.php b/inc/Action/Logout.php
@@ -33,6 +33,8 @@ public function preProcess() {
         global $ID;
         global $INPUT;
 
+        if (!checkSecurityToken()) throw new ActionException();
+
         // when logging out during an edit session, unlock the page
         $lockedby = checklock($ID);
         if($lockedby == $INPUT->server->str('REMOTE_USER')) {