mirror of
https://github.com/skipperbent/simple-php-router.git
synced 2026-06-15 18:23:26 +03:00
- It's now possible to adjust the load-order for parameters on routes. - Replaced PHP 7.1 deprecated `mcrypt_create_iv` function with `random_bytes` if it is available (requires > PHP7) - Added `setIndex`, `setName` and `setValue` methods to `IInputItem` to allow for extendability. - Cleanup and bug fixes.
71 lines
1.3 KiB
PHP
71 lines
1.3 KiB
PHP
<?php
|
|
namespace Pecee;
|
|
|
|
class CsrfToken
|
|
{
|
|
const CSRF_KEY = 'XSRF-TOKEN';
|
|
|
|
protected $token;
|
|
|
|
/**
|
|
* Generate random identifier for CSRF token
|
|
*
|
|
* @return string
|
|
*/
|
|
public static function generateToken()
|
|
{
|
|
if (function_exists('random_bytes')) {
|
|
return bin2hex(random_bytes(32));
|
|
}
|
|
|
|
return bin2hex(openssl_random_pseudo_bytes(32));
|
|
}
|
|
|
|
/**
|
|
* Validate valid CSRF token
|
|
*
|
|
* @param string $token
|
|
* @return bool
|
|
*/
|
|
public function validate($token)
|
|
{
|
|
if ($token !== null && $this->getToken() !== null) {
|
|
return hash_equals($token, $this->getToken());
|
|
}
|
|
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* Set csrf token cookie
|
|
*
|
|
* @param $token
|
|
*/
|
|
public function setToken($token)
|
|
{
|
|
setcookie(static::CSRF_KEY, $token, time() + 60 * 120, '/');
|
|
}
|
|
|
|
/**
|
|
* Get csrf token
|
|
* @return string|null
|
|
*/
|
|
public function getToken()
|
|
{
|
|
if ($this->hasToken()) {
|
|
return $_COOKIE[static::CSRF_KEY];
|
|
}
|
|
|
|
return null;
|
|
}
|
|
|
|
/**
|
|
* Returns whether the csrf token has been defined
|
|
* @return bool
|
|
*/
|
|
public function hasToken()
|
|
{
|
|
return isset($_COOKIE[static::CSRF_KEY]);
|
|
}
|
|
|
|
} |