From fe66d104a6d89ccfc2185ccd078d9b14842e0d32 Mon Sep 17 00:00:00 2001
From: Henry Sudhof <kellanved@phpbb.com>
Date: Tue, 16 Oct 2007 22:11:32 +0000
Subject: [PATCH] Lesson learned.

git-svn-id: file:///svn/phpbb/trunk@8199 89ea8834-ac86-4346-8a33-228a782c2dd0
---
 phpBB/includes/functions.php | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/phpBB/includes/functions.php b/phpBB/includes/functions.php
index ab27b62656..f55a5b4d39 100644
--- a/phpBB/includes/functions.php
+++ b/phpBB/includes/functions.php
@@ -2034,7 +2034,8 @@ function check_form_key($form_name, $timespan = false, $return_page = '', $trigg
 
 	if ($timespan === false)
 	{
-		$timespan = $config['form_token_lifetime'];
+		// we enforce a minimum value of half a minute here.
+		$timespan = max(30, $config['form_token_lifetime']);
 	}
 	if ($minimum_time === false)
 	{