Skip to content

Commit

Permalink
Fix security issue
Browse files Browse the repository at this point in the history
  • Loading branch information
cese committed Feb 4, 2014
1 parent 09d39a9 commit db66042
Showing 1 changed file with 4 additions and 0 deletions.
4 changes: 4 additions & 0 deletions index.php
Original file line number Diff line number Diff line change
Expand Up @@ -308,6 +308,10 @@ function processPasteDelete($pasteid,$deletetoken)
return array('','Paste does not exist, has expired or has been deleted.','');
}
}
else
{
return array('','Invalid data','');
}

if ($deletetoken != hash_hmac('sha1', $pasteid , getServerSalt())) // Make sure token is valid.
{
Expand Down

0 comments on commit db66042

Please sign in to comment.