Skip to content

Commit 14f347d

Browse files
trashercedric-anne
authored andcommitted
It's no longer possible to remove CSRF check in v11
1 parent c9d0ff7 commit 14f347d

File tree

1 file changed

+0
-16
lines changed

1 file changed

+0
-16
lines changed

source/devapi/extra.rst

Lines changed: 0 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -28,19 +28,3 @@ You can define a unique email recipient for all emails that will be sent from GL
2828
2929
<?php
3030
define('GLPI_FORCE_MAIL', '[email protected]');
31-
32-
Disabling CSRF checks
33-
^^^^^^^^^^^^^^^^^^^^^
34-
35-
.. warning::
36-
37-
**Use it with cautions!**
38-
39-
While disabling CSRF checks may be really interesting during debugging, keep in mind that enabling it again (which is the default) may cause issues you cannot see before.
40-
41-
CSRF checks will prevent for example a same form to be sent twice. While this is the expected behavior for the application, this may be a pain during development or debugging. You can therefore use the ``GLPI_USE_CSRF_CHECK`` constant in the ``local_define.php`` file:
42-
43-
.. code-block:: php
44-
45-
<?php
46-
define('GLPI_USE_CSRF_CHECK', 0);

0 commit comments

Comments
 (0)