Initialize token

git-svn-id: https://adminer.svn.sourceforge.net/svnroot/adminer/trunk@846 7c3ca157-0c34-0410-bff1-cbf682f78f5c

diff --git a/editor/include/auth.inc.php b/editor/include/auth.inc.php
index e1367b2066a911aa2fc3ae6f0a679fb739487364..f3d5096ef1886dc370adb494f18fbb6f8544252d 100644 (file)
--- a/editor/include/auth.inc.php
+++ b/editor/include/auth.inc.php
@@ -9,3 +9,4 @@ if (is_string($dbh)) {
        auth_error();
        exit;
 }
+$_SESSION["tokens"][$_GET["server"]] = rand(1, 1e6); // defense against cross-site request forgery