PHP ConnectorSecurity::CSRF_detected Examples

Example #1

File: xss_filter.php Project: neohusky/demo

 static function checkCSRF($edit)
 {
     @session_start();
     if (ConnectorSecurity::$security_key) {
         if ($edit === true) {
             if (!isset($_POST['dhx_security'])) {
                 return ConnectorSecurity::CSRF_detected();
             }
             $master_key = $_SESSION['dhx_security'];
             $update_key = $_POST['dhx_security'];
             if ($master_key != $update_key) {
                 return ConnectorSecurity::CSRF_detected();
             }
             return "";
         }
         //data loading
         if (!array_key_exists("dhx_security", $_SESSION)) {
             $_SESSION["dhx_security"] = md5(uniqid());
         }
         return $_SESSION["dhx_security"];
     }
     return "";
 }