From efa9174ac25bdda8b8d943ff25c8a065cc787f5e Mon Sep 17 00:00:00 2001
From: jim-p <jimp@pfsense.org>
Date: Thu, 22 Sep 2016 09:15:48 -0400
Subject: [PATCH] Declare $config as a global in guiconfig.inc csrf_startup()
 function, to properly respect the timeouts. Ticket #6803

---
 src/usr/local/www/guiconfig.inc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/usr/local/www/guiconfig.inc b/src/usr/local/www/guiconfig.inc
index 1da88ce9bf..38a6c17957 100644
--- a/src/usr/local/www/guiconfig.inc
+++ b/src/usr/local/www/guiconfig.inc
@@ -27,6 +27,7 @@
 /* THIS MUST BE ABOVE ALL OTHER CODE */
 if (!$nocsrf) {
 	function csrf_startup() {
+		global $config;
 		csrf_conf('rewrite-js', '/csrf/csrf-magic.js');
 		$timeout_minutes = isset($config['system']['webgui']['session_timeout']) ? $config['system']['webgui']['session_timeout'] : 240;
 		csrf_conf('expires', $timeout_minutes * 60);