commit dd28a888e8d9934260b14d0b7601da375fe75b8d
author Andrey Andreev <narf@devilix.net> Mon Sep 07 16:03:05 2015 +0300
committer Andrey Andreev <narf@devilix.net> Mon Sep 07 16:03:05 2015 +0300
tree c1b67b0a8211d7414bf65239770436d42db1cfe3
parent 0d0c53c50ccf34a216b19e90d2dc6adc51436f44

Move csrf_verify() call out of _sanitize_globals()

It doesn't belong in there.

system/core/Input.php

diff --git a/system/core/Input.php b/system/core/Input.php
index d896495..67a495e 100644
--- a/system/core/Input.php
+++ b/system/core/Input.php
@@ -153,6 +153,12 @@
 		// Sanitize global arrays
 		$this->_sanitize_globals();
 
+		// CSRF Protection check
+		if ($this->_enable_csrf === TRUE && ! is_cli())
+		{
+			$this->security->csrf_verify();
+		}
+
 		log_message('info', 'Input Class Initialized');
 	}
 
@@ -647,12 +653,6 @@
 		// Sanitize PHP_SELF
 		$_SERVER['PHP_SELF'] = strip_tags($_SERVER['PHP_SELF']);
 
-		// CSRF Protection check
-		if ($this->_enable_csrf === TRUE && ! is_cli())
-		{
-			$this->security->csrf_verify();
-		}
-
 		log_message('debug', 'Global POST, GET and COOKIE data sanitized');
 	}