mirror of
https://github.com/billz/raspap-webgui.git
synced 2025-03-01 10:31:47 +00:00
send CSRF token in a response header,
update the page's CSRF tokens with the new token from the response header, verify csrf token in ajax endpoints, initialize a session for every endpoint
This commit is contained in:
@@ -1,5 +1,7 @@
|
||||
<?php
|
||||
session_start();
|
||||
|
||||
require('includes/csrf.php');
|
||||
|
||||
include_once('../../includes/functions.php');
|
||||
|
||||
if(isset($_POST['interface'])) {
|
||||
|
Reference in New Issue
Block a user