revi-archive/phorge-phorge
1
0
Fork 0
mirror of https://we.phorge.it/source/phorge.git synced 2024-12-20 12:30:56 +01:00
Code Issues Releases Wiki Activity

Unguard another safe write in Conduit token generation.

Browse source
This commit is contained in:
epriestley 2011-08-17 12:00:35 -07:00
parent cd3a3bf759
commit b42b78f65c
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
src/applications/conduit/controller/token/PhabricatorConduitTokenController.php
View file

@ -25,6 +25,11 @@ class PhabricatorConduitTokenController extends PhabricatorConduitController {
$user = $this->getRequest()->getUser(); $user = $this->getRequest()->getUser();
// Ideally we'd like to verify this, but it's fine to leave it unguarded
// for now and verifying it would need some Ajax junk or for the user to
// click a button or similar.
$unguarded = AphrontWriteGuard::beginScopedUnguardedWrites();
$old_token = id(new PhabricatorConduitCertificateToken()) $old_token = id(new PhabricatorConduitCertificateToken())
->loadOneWhere( ->loadOneWhere(
'userPHID = %s', 'userPHID = %s',