frodovdr/raspap-webgui
1
0
Fork 0
mirror of https://github.com/billz/raspap-webgui.git synced 2025-03-01 10:31:47 +00:00
Code Issues Packages Projects Releases Wiki Activity

Decouple session from csrf handler, set initial lastActivity

Browse Source
This commit is contained in:
billz 2025-01-20 00:55:21 -08:00
parent 866d8eb5b0
commit c51b520b8d
3 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
includes/csrf.php
View File

@ -1,7 +1,6 @@
<?php <?php
require_once 'functions.php'; require_once 'functions.php';
require_once 'session.php';
if (csrfValidateRequest() && !CSRFValidate()) { if (csrfValidateRequest() && !CSRFValidate()) {
handleInvalidCSRFToken(); handleInvalidCSRFToken();

5
includes/session.php
View File

@ -3,3 +3,8 @@
if (session_status() == PHP_SESSION_NONE) { if (session_status() == PHP_SESSION_NONE) {
session_start(); session_start();
} }
if (!isset($_SESSION['lastActivity'])) {
$_SESSION['lastActivity'] = time();
}

1
index.php
View File

@ -23,6 +23,7 @@
* as you leave these references intact in the header comments of your source files. * as you leave these references intact in the header comments of your source files.
*/ */
require 'includes/session.php';
require 'includes/csrf.php'; require 'includes/csrf.php';
ensureCSRFSessionToken(); ensureCSRFSessionToken();