📄 File: csrf.php

Path: /home2/outerorb/assetradar.outerorbittech.com/inc/csrf.php

Size: 668 B

Permissions: 0666

<?php
// inc/csrf.php - CSRF token helpers
if (!isset($_SESSION)) session_start();

function csrf_token() {
    if (empty($_SESSION['csrf_token'])) {
        $_SESSION['csrf_token'] = bin2hex(random_bytes(24));
    }
    return $_SESSION['csrf_token'];
}

function csrf_field() {
    $t = csrf_token();
    return '<input type="hidden" name="_csrf" value="'.htmlspecialchars($t).'">';
}

function verify_csrf() {
    if ($_SERVER['REQUEST_METHOD'] === 'POST') {
        if (!isset($_POST['_csrf']) || !hash_equals($_SESSION['csrf_token'] ?? '', $_POST['_csrf'])) {
            http_response_code(403);
            die('CSRF validation failed.');
        }
    }
}
?>

← Back to Directory Edit File 🔒 Chmod