summaryrefslogtreecommitdiff
path: root/engine/csrf.php
diff options
context:
space:
mode:
authorEvgeny Zinoviev <me@ch1p.io>2024-01-31 06:11:00 +0300
committerEvgeny Zinoviev <me@ch1p.io>2024-01-31 20:45:40 +0300
commitc0dc531ebefd8912819f3b6c8bda1fed3c7e750c (patch)
tree2c75aa9df182260aef09faf4befd81a4c2b9c5e2 /engine/csrf.php
parent48d688cdf7f9eae1bf11b8a6f0e5b98687c604cb (diff)
make it simple, but not simpler
Diffstat (limited to 'engine/csrf.php')
-rw-r--r--engine/csrf.php22
1 files changed, 0 insertions, 22 deletions
diff --git a/engine/csrf.php b/engine/csrf.php
deleted file mode 100644
index 20ea919..0000000
--- a/engine/csrf.php
+++ /dev/null
@@ -1,22 +0,0 @@
-<?php
-
-class csrf {
-
- public static function check(string $key): void {
- $user_csrf = self::get($key);
- $sent_csrf = $_REQUEST['token'] ?? '';
-
- if ($sent_csrf != $user_csrf)
- throw new ForbiddenException("csrf error");
- }
-
- public static function get(string $key): string {
- return self::getToken($_SERVER['REMOTE_ADDR'], $key);
- }
-
- protected static function getToken(string $user_token, string $key): string {
- global $config;
- return substr(sha1($config['csrf_token'].$user_token.$key), 0, 20);
- }
-
-} \ No newline at end of file