diff --git a/system/init.php b/system/init.php
index 0a74ab01..672e583e 100644
--- a/system/init.php
+++ b/system/init.php
@@ -142,7 +142,7 @@ $settings->load();
 
 // csrf protection
 $token = getSession('csrf_token');
-if (!isset($token)) {
+if (!isset($token) || !$token) {
 	CsrfToken::generate();
 }