experimental CSRF protection

[tt-rss.git] / classes / feeds.php

diff --git a/classes/feeds.php b/classes/feeds.php
index 3626e9fbc44ac0921e3155095c553d8a3f42a877..6b498ac00337820ea9be3284d0f23b3d04b52543 100644 (file)
--- a/classes/feeds.php
+++ b/classes/feeds.php
@@ -1,6 +1,12 @@
 <?php\r
 class Feeds extends Protected_Handler {\r
 \r
+       function csrf_ignore($method) {\r
+               $csrf_ignored = array("index");\r
+\r
+               return array_search($method, $csrf_ignored) !== false;\r
+       }\r
+\r
        private function feedlist_init_cat($cat_id, $hidden = false) {\r
                $obj = array();\r
                $cat_id = (int) $cat_id;\r