From: Cash Costello <cash.costello@gmail.com>
Date: Sun, 10 Mar 2013 15:47:05 +0000 (-0400)
Subject: require token for login
X-Git-Url: https://gitweb.fluxo.info/?a=commitdiff_plain;h=473b5065a21544c6d66dd82e024d4f1f0d58ff87;p=lorea%2Felgg.git

require token for login
---

diff --git a/engine/lib/actions.php b/engine/lib/actions.php
index ac6325813..f78ca63df 100644
--- a/engine/lib/actions.php
+++ b/engine/lib/actions.php
@@ -65,12 +65,11 @@ function action($action, $forwarder = "") {
 	// @todo REMOVE THESE ONCE #1509 IS IN PLACE.
 	// Allow users to disable plugins without a token in order to
 	// remove plugins that are incompatible.
-	// Login and logout are for convenience.
+	// Logout for convenience.
 	// file/download (see #2010)
 	$exceptions = array(
 		'admin/plugins/disable',
 		'logout',
-		'login',
 		'file/download',
 	);