fix #845

typecho · Mar 16, 2019 · 32c2f82 · 32c2f82
1 parent 8045a0d
commit 32c2f82
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion .
diff --git a/var/Widget/Logout.php b/var/Widget/Logout.php
@@ -28,6 +28,9 @@ class Widget_Logout extends Widget_Abstract_Users implements Widget_Interface_Do
  */
      public  function  action ()
  {
+         // protect
+         $ this -> security -> protect ();
+
          $ this -> user -> logout ();
          $ this -> pluginHandle ()-> logout ();
          $ this -> response -> goBack ( NULL , $ this -> options -> index );

diff --git a/var/Widget/Options.php b/var/Widget/Options.php
@@ -251,7 +251,8 @@ protected function ___profileUrl()
  */
      protected  function  ___logoutUrl ()
  {
-         return  Typecho_Common :: url ( '/action/logout' , $ this -> index );
+         return  $ this -> widget ( 'Widget_Security' )-> getTokenUrl (
+             Typecho_Common :: url ( '/action/logout' , $ this -> index ));
  }
 
      /**