From cb85e266bedb88f35125eec1d068cbf1df373789 Mon Sep 17 00:00:00 2001 From: Sebastian Grewe Date: Fri, 14 Feb 2014 14:16:36 +0100 Subject: [PATCH 1/2] [FIX] Use session ID for user uniqueness --- public/index.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/public/index.php b/public/index.php index c0a91804..2f7cd01e 100644 --- a/public/index.php +++ b/public/index.php @@ -148,11 +148,11 @@ $action = (isset($_REQUEST['action']) && !is_array($_REQUEST['action'])) && isse // Check csrf token validity if necessary if ($config['csrf']['enabled'] && isset($_REQUEST['ctoken']) && !empty($_REQUEST['ctoken']) && !is_array($_REQUEST['ctoken'])) { - $csrftoken->valid = ($csrftoken->checkBasic($user->getCurrentIP(), $arrPages[$page], $_REQUEST['ctoken'])) ? 1 : 0; + $csrftoken->valid = ($csrftoken->checkBasic(session_id(), $arrPages[$page], $_REQUEST['ctoken'])) ? 1 : 0; } else if ($config['csrf']['enabled'] && (!@$_REQUEST['ctoken'] || empty($_REQUEST['ctoken']))) { $csrftoken->valid = 0; } -if ($config['csrf']['enabled']) $smarty->assign('CTOKEN', $csrftoken->getBasic($user->getCurrentIP(), $arrPages[$page])); +if ($config['csrf']['enabled']) $smarty->assign('CTOKEN', $csrftoken->getBasic(session_id(), $arrPages[$page])); // Load the page code setting the content for the page OR the page action instead if set if (!empty($action)) { From 9e59f7138447c97e9bc7546dd268d345fe2bbcec Mon Sep 17 00:00:00 2001 From: Martin madsen Date: Fri, 14 Feb 2014 20:02:50 +0100 Subject: [PATCH 2/2] Fix link to 'Wow, Much Pool' donor in README --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 0a08dd19..ef706f46 100644 --- a/README.md +++ b/README.md @@ -38,7 +38,7 @@ These people have supported this project with a donation: * [xisi](https://github.com/xisi) * [PCFiL](https://github.com/PCFiL) * [rog1121](https://github.com/rog1121)(https://rapidhash.net) -* [Wow, Much Pool](http://http://www.wowmuchpool.com/) +* [Wow, Much Pool](http://www.wowmuchpool.com/) Pools running MPOS ================== @@ -56,7 +56,7 @@ supported. They will never match an upstream share, solo miners do not create any shares, only blocks. Expect weird behavior if trying to mix them. See #299 for full information. -* 64 bit system +* 64-bit system * Otherwise some coins will display wrong network hashrates * Apache2 * libapache2-mod-php5