Fix logout missing csrf token

kelunik · kelunik · commit f1b2fefb1832 · 2023-03-28T22:31:10.000+02:00
See https://forum.dokuwiki.org/d/20248-security-token-did-not-match-possible-csrf-attack-cannot-log-out/8
diff --git a/dokuwiki/lib/tpl/phpnet/main.php b/dokuwiki/lib/tpl/phpnet/main.php
@@ -33,7 +33,7 @@
     $LINKS = array(
         array("href" => "?do=edit",     "text" => "Edit this page",),
         array("href" => "?do=admin",    "text" => "Admin",),
-        array("href" => "?do=logout",   "text" => "Logout",),
+        array("href" => "?do=logout&sectok=" . urlencode(getSecurityToken()), "text" => "Logout",),
         array("href" => "?do=profile",  "text" => $name,),
     );
 }

Original file line number	Diff line number	Diff line change
`@@ -33,7 +33,7 @@`
`33`	`33`	`$LINKS = array(`
`34`	`34`	`array("href" => "?do=edit", "text" => "Edit this page",),`
`35`	`35`	`array("href" => "?do=admin", "text" => "Admin",),`
`36`		`- array("href" => "?do=logout", "text" => "Logout",),`
	`36`	`+ array("href" => "?do=logout&sectok=" . urlencode(getSecurityToken()), "text" => "Logout",),`
`37`	`37`	`array("href" => "?do=profile", "text" => $name,),`
`38`	`38`	`);`
`39`	`39`	`}`