From 56e284ccba86e25a9b252cf7e9926bac3eb6fd5f Mon Sep 17 00:00:00 2001
From: KANE LAZENI <lkane@ebene.info>
Date: Thu, 23 Apr 2026 15:00:00 +0000
Subject: [PATCH] a

---
 Contestation/Contesterdossier.php    |  2 +-
 Contestation/Validercontestation.php | 18 ++++++++++++++++++
 2 files changed, 19 insertions(+), 1 deletion(-)

diff --git a/Contestation/Contesterdossier.php b/Contestation/Contesterdossier.php
index d2fa328..d73d8d8 100755
--- a/Contestation/Contesterdossier.php
+++ b/Contestation/Contesterdossier.php
@@ -308,7 +308,7 @@
 				<!-- Contestation Form -->
 				<form action="<?= $action ?>" method="post">
 					<!-- <input type="hidden" id="csrf_token" name="csrf_token" value="<?= htmlspecialchars($token) ?>"> -->
-					<input type="text" id="csrf_token" name="csrf_token" value="<?= htmlspecialchars($token) ?>">
+					<input class="form-control" type="text" id="csrf_token" name="csrf_token" value="<?= htmlspecialchars($token) ?>">
 					
 					<div class="mb-4">
 						<label for="motifContestation" class="form-label required">
diff --git a/Contestation/Validercontestation.php b/Contestation/Validercontestation.php
index e59d738..0904e65 100755
--- a/Contestation/Validercontestation.php
+++ b/Contestation/Validercontestation.php
@@ -57,6 +57,24 @@ function afficherMessage($message, $estErreur = true) {
     exit();
 }
 
+
+var_dump($_POST);
+
+if (!isset($_POST['csrf_token'])) {
+    afficherMessage("<strong>Mauvaise session!</strong>");
+}
+
+$csrf_token = trim($_POST['csrf_token']);
+
+if (!Csrf::validateToken($csrf_token)) {
+	afficherMessage("<strong>Mauvaise session!</strong>");
+	// exit;
+}
+
+echo "On peut maintenant contester";
+exit;
+
+
 // Configuration de la langue
 if (!isset($_SESSION['codeLangue'])) {
     afficherMessage("<strong>Paramètre langue absent de la requête!</strong>");