diff --git a/bl-kernel/admin/controllers/install-theme.php b/bl-kernel/admin/controllers/install-theme.php index 91657e84..2bfa6c91 100644 --- a/bl-kernel/admin/controllers/install-theme.php +++ b/bl-kernel/admin/controllers/install-theme.php @@ -21,23 +21,25 @@ checkRole(array('admin')); // ============================================================================ // Main after POST // ============================================================================ +$token = ""; $parameters = explode("/", $layout['parameters']); if(count($parameters)==2) { $themeDirectory = $parameters[0]; // Verify CSRF Token $token = Sanitize::html($parameters[1]); - if (!$security->validateTokenCSRF($token)) { - Log::set(__FILE__.LOG_SEP.'Error occurred when trying to validate the tokenCSRF.', ALERT_STATUS_FAIL); - Log::set(__FILE__.LOG_SEP.'Token in install theme ['.$token.']', ALERT_STATUS_FAIL); - - Session::destroy(); - Redirect::page('login'); - } else { + if ($security->validateTokenCSRF($token)) { // Activate theme activateTheme($themeDirectory); + + // Redirect + Redirect::page('themes'); } } -// Redirect -Redirect::page('themes'); +Log::set(__FILE__.LOG_SEP.'Error occurred when trying to validate the tokenCSRF.', ALERT_STATUS_FAIL); +Log::set(__FILE__.LOG_SEP.'Token in install theme ['.$token.']', ALERT_STATUS_FAIL); + +Session::destroy(); +Redirect::page('login'); +