From f05eb43d419e1e3bcb97cc8b288efad602bd29e5 Mon Sep 17 00:00:00 2001
From: KANE LAZENI <lkane@ebene.info>
Date: Thu, 23 Apr 2026 14:51:26 +0000
Subject: [PATCH] a

---
 Contestation/Contesterdossier.php             | 7 ++++++-
 Contestation/Demandereconnaissancefaciale.php | 3 +++
 2 files changed, 9 insertions(+), 1 deletion(-)
diff --git a/Contestation/Contesterdossier.php b/Contestation/Contesterdossier.php
index 816f378..d2fa328 100755
--- a/Contestation/Contesterdossier.php
+++ b/Contestation/Contesterdossier.php
@@ -3,6 +3,9 @@
 	session_unset();
 	require_once 'Csrf.php';
 
+	$token = Csrf::generateToken();
+	$_SESSION['csrf_token_submieted'] = $token;
+	  
 	function afficherMessage($message) {
 		echo "<!DOCTYPE html>
 		<html lang='fr'>
@@ -304,7 +307,9 @@
 				
 				<!-- Contestation Form -->
 				<form action="<?= $action ?>" method="post">
-				
+					<!-- <input type="hidden" id="csrf_token" name="csrf_token" value="<?= htmlspecialchars($token) ?>"> -->
+					<input type="text" id="csrf_token" name="csrf_token" value="<?= htmlspecialchars($token) ?>">
+					
 					<div class="mb-4">
 						<label for="motifContestation" class="form-label required">
 							<?= htmlspecialchars($labelMotifContestation) ?>
diff --git a/Contestation/Demandereconnaissancefaciale.php b/Contestation/Demandereconnaissancefaciale.php
index 342b555..373b191 100755
--- a/Contestation/Demandereconnaissancefaciale.php
+++ b/Contestation/Demandereconnaissancefaciale.php
@@ -3,6 +3,9 @@
 	session_unset();
 	require_once 'Csrf.php';
 
+	$token = Csrf::generateToken();
+	$_SESSION['csrf_token_submieted'] = $token;
+
 	if (!isset($_GET['lg'])) {
 		afficherMessage("Paramètre langue absent de la requête!", "Erreur");
 	}
