Fixes #1527: Logout doens't require an action token. This is a temporary fix until...

git-svn-id: http://code.elgg.org/elgg/trunk@3943 36083f99-b078-4883-b0ff-0f9b5a30f544

diff --git a/engine/lib/actions.php b/engine/lib/actions.php
index bd3bdb80a1df73cc80c5d45abf5239b89746ef8e..278194ac3f6d54e65089bad162ea1fca6732c797 100644 (file)
--- a/engine/lib/actions.php
+++ b/engine/lib/actions.php
@@ -29,7 +29,8 @@ function action($action, $forwarder = "") {
        // UI without tokens.  (And for installation because of session_id problems)
        $exceptions = array(
                'systemsettings/install',
-               'admin/plugins/disable'
+               'admin/plugins/disable',
+               'logout'
        );
 
        if (!in_array($action, $exceptions)) {