From 6229b82a43e808d4ead53f841f9cbed3e7393366 Mon Sep 17 00:00:00 2001
From: Michael Save <savetheinternet@tinyboard.org>
Date: Mon, 27 Aug 2012 15:19:05 +1000
Subject: CSRF protection

---
 inc/config.php | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

(limited to 'inc/config.php')

diff --git a/inc/config.php b/inc/config.php
index cd5896fc..3b449b5e 100644
--- a/inc/config.php
+++ b/inc/config.php
@@ -686,6 +686,7 @@
 	$config['error']['404']			= _('Page not found.');
 	$config['error']['modexists']		= _('That mod <a href="?/users/%d">already exists</a>!');
 	$config['error']['invalidtheme']	= _('That theme doesn\'t exist!');
+	$config['error']['csrf']		= _('Invalid security token! Please go back and try again.');
 
 /*
  * =========================
@@ -754,9 +755,6 @@
  *  Mod settings
  * ====================
  */
- 
- 	// Server-side confirm button for actions like deleting posts, for when Javascript is disabled or the DOM isn't loaded.
-	$config['mod']['server-side_confirm'] = true;
 	
 	// Whether or not to lock moderator sessions to the IP address that was logged in with.
 	$config['mod']['lock_ip'] = true;
-- 
cgit v1.3