mirror of
https://github.com/slawkens/myaac.git
synced 2025-10-17 03:03:26 +02:00
feature: csrf protection
This commit is contained in:
@@ -7,6 +7,9 @@
|
||||
* @copyright 2019 MyAAC
|
||||
* @link https://my-aac.org
|
||||
*/
|
||||
|
||||
use MyAAC\CsrfToken;
|
||||
|
||||
defined('MYAAC') or die('Direct access not allowed!');
|
||||
|
||||
if(isset($account_logged) && $account_logged->isLoaded()) {
|
||||
@@ -15,6 +18,8 @@ if(isset($account_logged) && $account_logged->isLoaded()) {
|
||||
unsetSession('password');
|
||||
unsetSession('remember_me');
|
||||
|
||||
CsrfToken::generate();
|
||||
|
||||
$logged = false;
|
||||
unset($account_logged);
|
||||
|
||||
|
Reference in New Issue
Block a user