EllisLab/CodeIgniter — pull request #1087 by narfbg (2012-02-27 22:05:25+00:00)
Title: Fix issue #499

The Security class constructor used to initialize all CSRF-related properties and call `_csrf_set_hash()` regardless of `$config['csrf_protection']`'s value.

Also replaced an ` ! isset($var) OR ! $var` expression with `empty($var)` and removed a few spaces on the way.