From 0ab6b38d57fc807ed3a00094c4254f00d9fa6cec Mon Sep 17 00:00:00 2001 From: KANE LAZENI Date: Wed, 22 Apr 2026 09:50:14 +0000 Subject: [PATCH] a --- Controleur/ControleurRemboursement.php | 8 ++------ 1 file changed, 2 insertions(+), 6 deletions(-) diff --git a/Controleur/ControleurRemboursement.php b/Controleur/ControleurRemboursement.php index a609a54..37941a2 100755 --- a/Controleur/ControleurRemboursement.php +++ b/Controleur/ControleurRemboursement.php @@ -57,10 +57,10 @@ class ControleurRemboursement extends Controleur { // if(!empty($_POST)) if(!empty($_FILES)) { - header("Location: https://assure.ebene.ovh/Historiqueremboursement/KANE"); - $csrf_token = trim($this->requete->getParametreFormulaire("csrf_token_upload")); + header("Location: https://assure.ebene.ovh/Historiqueremboursement/$csrf_token"); + if (!Csrf::validateToken($csrf_token)) { $_SESSION['flash_error'] = 'Votre session a expiré. Veuillez réessayer.'; @@ -148,12 +148,8 @@ class ControleurRemboursement extends Controleur { // fin upload } - - header("Location: https://assure.ebene.ovh/Historiqueremboursement/LAZ"); - // $this->executerAction("index"); echo "après uploadged"; - } } \ No newline at end of file