Creating CSRF token

This commit is contained in:
Dennis Eichhorn 2015-12-27 11:45:48 +01:00
parent a9d56c9787
commit 66e7eb03a6

View File

@ -14,6 +14,8 @@
* @link http://orange-management.com * @link http://orange-management.com
*/ */
namespace phpOMS\DataStorage\Session; namespace phpOMS\DataStorage\Session;
use phpOMS\Uri\UriFactory;
use phpOMS\Utils\RnG\StringUtils;
/** /**
* Http session class. * Http session class.
@ -54,12 +56,17 @@ class HttpSession implements SessionInterface
session_id($sid); session_id($sid);
} }
session_set_cookie_params($liftetime); session_set_cookie_params($liftetime, '/', null, false, true);
session_start(); session_start();
$this->sessionData = $_SESSION; $this->sessionData = $_SESSION;
$_SESSION = null;
$this->sid = session_id(); $this->sid = session_id();
session_write_close(); session_write_close();
$CSRF = StringUtils::generateString(10, 16);
$this->set('CSRF', $CSRF, false);
UriFactory::setQuery('$CSRF', $CSRF);
} }
/** /**