diff options
| author | Pierre Schmitz <pierre@archlinux.de> | 2015-08-16 08:22:05 +0200 |
|---|---|---|
| committer | Pierre Schmitz <pierre@archlinux.de> | 2015-08-16 08:22:05 +0200 |
| commit | 1a365e77dfb8825136626202b1df462731b42060 (patch) | |
| tree | 1dc4468eaabf070e051e790a9e67a9a9a2c63d99 /includes/api/ApiBase.php | |
| parent | a72fd280f7acb4d2a1ba579a0f1b2b2ae8958530 (diff) | |
Update to MediaWiki 1.25.2
Diffstat (limited to 'includes/api/ApiBase.php')
| -rw-r--r-- | includes/api/ApiBase.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/includes/api/ApiBase.php b/includes/api/ApiBase.php index 5a1eb995..6c33da57 100644 --- a/includes/api/ApiBase.php +++ b/includes/api/ApiBase.php @@ -1192,7 +1192,7 @@ abstract class ApiBase extends ContextSource { $this->dieUsage( 'Specified user does not exist', 'bad_wlowner' ); } $token = $user->getOption( 'watchlisttoken' ); - if ( $token == '' || $token != $params['token'] ) { + if ( $token == '' || !hash_equals( $token, $params['token'] ) ) { $this->dieUsage( 'Incorrect watchlist token provided -- please set a correct token in Special:Preferences', 'bad_wltoken' |