summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorEvan Prodromou <evan@prodromou.name>2008-08-29 01:16:28 -0400
committerEvan Prodromou <evan@prodromou.name>2008-08-29 01:16:28 -0400
commit9b741c4f9a211906f18b8aee7fe7cee58f911403 (patch)
tree235e5b30d9a6163f13179104f90ea883f5a5b2f6
parent4272da4e9e2ab9c99b4b9897f04c92cd7987cb8b (diff)
better client error on CSRF problem with subscribe/unsubscribe
darcs-hash:20080829051628-84dde-2a339a35c422afb9ec04f757771764ed43b2c28b.gz
-rw-r--r--actions/subscribe.php2
-rw-r--r--actions/unsubscribe.php2
2 files changed, 2 insertions, 2 deletions
diff --git a/actions/subscribe.php b/actions/subscribe.php
index 8bb723799..8d04934b7 100644
--- a/actions/subscribe.php
+++ b/actions/subscribe.php
@@ -41,7 +41,7 @@ class SubscribeAction extends Action {
$token = $this->trimmed('token');
if (!$token || $token != common_session_token()) {
- common_redirect(common_local_url('subscriptions', array('nickname' => $user->nickname)));
+ $this->client_error(_('There was a problem with your session token. Try again, please.'));
return;
}
diff --git a/actions/unsubscribe.php b/actions/unsubscribe.php
index e0392413d..4bfaf7958 100644
--- a/actions/unsubscribe.php
+++ b/actions/unsubscribe.php
@@ -38,7 +38,7 @@ class UnsubscribeAction extends Action {
$token = $this->trimmed('token');
if (!$token || $token != common_session_token()) {
- common_redirect(common_local_url('subscriptions', array('nickname' => $user->nickname)));
+ $this->client_error(_('There was a problem with your session token. Try again, please.'));
return;
}