Patch to fix 375010

git-svn-id: http://svn.mozilla.org/addons/trunk@3403 4eb1ac78-321c-0410-a911-ec516a8615a5

1 files changed, 2 insertions, 9 deletions

diff --git a/site/app/app_controller.php b/site/app/app_controller.php
index 69d0c9b..ccfbffc 100644
--- a/site/app/app_controller.php
+++ b/site/app/app_controller.php
@@ -304,19 +304,12 @@ class AppController extends Controller
         switch ($level) {
 
             case 'low':
-                    ini_set('session.referer_check','');
+                    define('CAKE_SECURITY', 'low');
                     break;
 
             case 'high':
             default:
-                    $_host = env('HTTP_HOST');
-
-                    // Pulled from cake/libs/session.php
-                    if (strpos($_host, ':') !== false) {
-                        $_host = substr($_host, 0, strpos($_host, ':'));
-                    }
-
-                    ini_set('session.referer_check',$_host);
+                    define('CAKE_SECURITY', 'high');
                     break;
         }
     }