galads/icehrm
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Add csrf token

Browse Source
This commit is contained in:
gamonoid
2018-06-14 04:05:22 +02:00
parent 025a8283ab
commit fde94aa7fa
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
core/login.php
View File

@@ -159,6 +159,9 @@ if (empty($user) || empty($user->email)) {
$tuser = \Utils\SessionUtils::getSessionObject('user');
$logoFileUrl = \Classes\UIManager::getInstance()->getCompanyLogoUrl();
$csrfToken = sha1(rand(4500, 100000) . time(). CLIENT_BASE_URL);
\Utils\SessionUtils::saveSessionObject('csrf-login', $csrfToken);
?><!DOCTYPE html>
<html lang="en">
<head>