Replace %%CSRF%% variable with CSRF token

2023-08-23 18:16:34 +02:00 · 2023-08-23 18:16:34 +02:00 · 06b7e6dc6e
parent ed9f4c8eed
commit 06b7e6dc6e
1 changed files with 3 additions and 0 deletions
--- a/classen/HTML.php
+++ b/classen/HTML.php
@ -225,6 +225,9 @@
 			//Die IP Adresse wird in den HTML Quellcode eingef<65>gt.
 			$this->FertigesHTML = str_replace("%%GET_IP%%", @$_SERVER["REMOTE_ADDR"], $this->FertigesHTML);

+			// Add CSRF token
+			$this->FertigesHTML = str_replace("%%CSRF%%", '<input type="hidden" name="csrf" value="'.$_SESSION['csrf'].'">');
+			
 			$this->isBuild = true;
 		}