PHP ParagonIE\AntiCSRF AntiCSRF::insertToken Beispiele

insertToken() public method

Insert a CSRF token to a form

public insertToken ( string $lockTo = '', boolean $echo = true ) : string
$lockTo	string	This CSRF token is only valid for this HTTP request endpoint
$echo	boolean	if true, echo instead of returning
return	string

Beispiel #1

Datei: AntiCSRFTest.php Projekt: jorik041/anti-csrf

 /**
  * @covers \Resonantcore\AntiCSRF\AntiCSRF::insertToken()
  */
 public function testInsertToken()
 {
     @session_start();
     ob_start();
     AntiCSRF::insertToken();
     $token_html = ob_get_clean();
     $this->assertFalse(empty($_SESSION[AntiCSRF::SESSION_INDEX]));
     $this->assertContains("<input", $token_html);
 }

Beispiel #2

Datei: AntiCSRFTest.php Projekt: paragonie/anti-csrf

 /**
  * @covers \Resonantcore\AntiCSRF\AntiCSRF::insertToken()
  */
 public function testInsertToken()
 {
     $post = [];
     $session = [];
     $server = $_SERVER;
     $csrft = new AntiCSRF($post, $session, $server);
     $token_html = $csrft->insertToken('', false);
     $idx = $csrft->getSessionIndex();
     $this->assertFalse(empty($csrft->session[$idx]));
     $this->assertFalse(empty($session[$idx]));
     $this->assertContains("<input", $token_html);
 }