1
0
mirror of https://github.com/flextype/flextype.git synced 2025-08-08 14:16:46 +02:00

feat(middlewares): update csrf middleware

This commit is contained in:
Awilum
2021-07-16 17:18:40 +03:00
parent a044706db7
commit 086ba796aa

View File

@@ -23,10 +23,10 @@ class CsrfMiddleware
*/
public function __invoke(Request $request, Response $response, callable $next) : Response
{
$post_data = $request->getParsedBody();
$data = $request->getParsedBody();
if (isset($post_data[flextype('csrf')->getTokenName()])) {
if (flextype('csrf')->isValid($post_data[flextype('csrf')->getTokenName()])) {
if (isset($data[flextype('csrf')->getTokenName()])) {
if (flextype('csrf')->isValid($data[flextype('csrf')->getTokenName()])) {
$response = $next($request, $response);
} else {
die('This looks like a cross-site request forgery!');