From 6f1ae104f3f7769d46d68fce5554522670f76476 Mon Sep 17 00:00:00 2001
From: glaszig <glaszig@gmail.com>
Date: Thu, 1 Aug 2019 13:01:03 +0200
Subject: [PATCH] improve CSRFToken() implementation

---
 includes/functions.php | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/includes/functions.php b/includes/functions.php
index b3f8b19d..b3b8f996 100755
--- a/includes/functions.php
+++ b/includes/functions.php
@@ -69,9 +69,8 @@ function ensureCSRFSessionToken()
 */
 function CSRFToken()
 {
-?>
-<input id="csrf_token" type="hidden" name="csrf_token" value="<?php echo htmlspecialchars($_SESSION['csrf_token'], ENT_QUOTES); ?>" />
-<?php
+    $token = htmlspecialchars($_SESSION['csrf_token']);
+    echo '<input id="csrf_token" type="hidden" name="csrf_token" value="' . $token . '">';
 }
 
 /**