Merge pull request #33 from jsonshen/master

忽略图片上传时检查csrf，比直接改csrf.js源码友好一些

app.js

@@ -26,7 +26,14 @@ app.configure(function() {
 	}));
 	// custom middleware
 	app.use(require('./controllers/sign').auth_user);
-	app.use(express.csrf());
+	
+	var csrf = express.csrf();
+	app.use(function(req, res, next){
+		// ignore upload image
+		if (req.body && req.body.user_action === 'upload_image')
+			return next();
+		csrf(req, res, next);
+	});
 
 	// plugins
 	var plugins = config.plugins || [];

public/stylesheets/style.css

@@ -475,20 +475,12 @@ a.count:hover {
 /* custom bootstrap */
 .navbar {
 	margin-bottom: 0px;
+	background-color: #323f4b;
 }
 .navbar .container {
 	width: 960px;
 	margin: 0px auto;
 }
-.navbar .navbar-inner{
-	-webkit-border-radius: 0px;
-	-moz-border-radius: 0px;
-	padding-left: 0px;
-	padding-right: 0px;
-	border-radius: 0px;
-	background-image: none;
-	background-color: #323f4b;
-}
 .navbar .brand {
 	padding: 7px 0px 0px 20px;
 	width: 150px;
@@ -584,4 +576,4 @@ form {
 	color: white;
 	padding: 2px;
 	
-}
+}