diff --git a/core/startup/ParameterConfirmationToken.php b/core/startup/ParameterConfirmationToken.php index acebc921c..e0ccf9d87 100644 --- a/core/startup/ParameterConfirmationToken.php +++ b/core/startup/ParameterConfirmationToken.php @@ -61,11 +61,8 @@ class ParameterConfirmationToken { // Store the token $this->token = isset($_GET[$parameterName.'token']) ? $_GET[$parameterName.'token'] : null; - // If a token was provided, but isn't valid, just throw a 403 - if ($this->token && (!$this->checkToken($this->token))) { - header("HTTP/1.0 403 Forbidden", true, 403); - die; - } + // If a token was provided, but isn't valid, ignore it + if ($this->token && (!$this->checkToken($this->token))) $this->token = null; } public function parameterProvided() {