mirror of
https://github.com/skipperbent/simple-php-router.git
synced 2026-06-17 08:47:52 +00:00
Merge pull request #300 from skipperbent/csrf-documentation
Added CSRF form-example in documentation (issue: #299)
This commit is contained in:
@@ -709,6 +709,20 @@ You can get the CSRF-token by calling the helper method:
|
|||||||
csrf_token();
|
csrf_token();
|
||||||
```
|
```
|
||||||
|
|
||||||
|
The default name/key for the input-field is `csrf_token` and is defined in the `POST_KEY` constant in the `BaseCsrfVerifier` class.
|
||||||
|
You can change the key by overwriting the constant in your own CSRF-verifier class.
|
||||||
|
|
||||||
|
**Example:**
|
||||||
|
|
||||||
|
The example below will post to the current url with a hidden field "`csrf_token`".
|
||||||
|
|
||||||
|
```html
|
||||||
|
<form method="post" action="<?= url(); ?>">
|
||||||
|
<input type="hidden" name="csrf_token" value="<?= csrf_token(); ?>">
|
||||||
|
<!-- other input elements here -->
|
||||||
|
</form>
|
||||||
|
```
|
||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
# Middlewares
|
# Middlewares
|
||||||
|
|||||||
@@ -1,4 +1,5 @@
|
|||||||
<?php
|
<?php
|
||||||
|
|
||||||
namespace Pecee\Http\Middleware;
|
namespace Pecee\Http\Middleware;
|
||||||
|
|
||||||
use Pecee\CsrfToken;
|
use Pecee\CsrfToken;
|
||||||
|
|||||||
Reference in New Issue
Block a user