Merge pull request #300 from skipperbent/csrf-documentation

Added CSRF form-example in documentation (issue: #299)
This commit is contained in:
Simon Sessingø
2017-10-23 22:05:41 +02:00
committed by GitHub
2 changed files with 15 additions and 0 deletions
+14
View File
@@ -709,6 +709,20 @@ You can get the CSRF-token by calling the helper method:
csrf_token();
```
The default name/key for the input-field is `csrf_token` and is defined in the `POST_KEY` constant in the `BaseCsrfVerifier` class.
You can change the key by overwriting the constant in your own CSRF-verifier class.
**Example:**
The example below will post to the current url with a hidden field "`csrf_token`".
```html
<form method="post" action="<?= url(); ?>">
<input type="hidden" name="csrf_token" value="<?= csrf_token(); ?>">
<!-- other input elements here -->
</form>
```
---
# Middlewares
@@ -1,4 +1,5 @@
<?php
namespace Pecee\Http\Middleware;
use Pecee\CsrfToken;