From 7b62588d7e3c4d09b2acc2c95cc633ef0f6d2b69 Mon Sep 17 00:00:00 2001 From: mdipierro Date: Tue, 17 Jul 2012 18:06:44 -0500 Subject: [PATCH] reverted last useless patch --- VERSION | 2 +- applications/admin/models/access.py | 9 --------- 2 files changed, 1 insertion(+), 10 deletions(-) diff --git a/VERSION b/VERSION index 81a434d1..e675489d 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -Version 2.00.0 (2012-07-17 18:01:46) dev +Version 2.00.0 (2012-07-17 18:06:40) dev diff --git a/applications/admin/models/access.py b/applications/admin/models/access.py index de6219b9..1669c526 100644 --- a/applications/admin/models/access.py +++ b/applications/admin/models/access.py @@ -2,7 +2,6 @@ import base64, os, time from gluon import portalocker from gluon.admin import apath from gluon.fileutils import read_file -from gluon.utils import web2py_uuid # ########################################################### # ## make sure administrator is on localhost or https # ########################################################### @@ -153,11 +152,3 @@ if request.controller=='appadmin' and DEMO_MODE: session.flash = 'Appadmin disabled in demo mode' redirect(URL('default','sites')) -# extra protection, csrf protection for every admin interaction -response.cookies['token'] = session.token = session.token or web2py_uuid() -if request.post_vars and not ( - 'token' in request.cookies and - request.cookies['token'].value == session.token): - raise HTTP(401,"Not Authorized") -# end extra secruity measures -