Commit 2cc52401 authored by Erase's avatar Erase
Browse files

Delete apache_request_headers for token verification

parent cf918996
......@@ -10,7 +10,6 @@
$_SESSION['csrf_token'] = uniqid(mt_rand(), true);
}
$headers = apache_request_headers();
if(!array_key_exists('t', $_POST) || !empty($_POST['t'])){
if ($_POST['t'] !== $_SESSION['csrf_token']) {
//~ Wrong token
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment