From 345e30e6d133b30fc7acc22551226f797bf55418 Mon Sep 17 00:00:00 2001
From: KANE LAZENI <lkane@ebene.info>
Date: Sat, 18 Jul 2026 07:16:31 +0000
Subject: [PATCH] a

---
 Controleur/ControleurRechercheprestations.php | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/Controleur/ControleurRechercheprestations.php b/Controleur/ControleurRechercheprestations.php
index 030aba0f..0beecbe4 100755
--- a/Controleur/ControleurRechercheprestations.php
+++ b/Controleur/ControleurRechercheprestations.php
@@ -32,10 +32,16 @@ class ControleurRechercheprestations extends Controleur {
 		$this->beneficiaire->getModeBiometrie();
 		
 		if(!empty($_POST))
-		// if (isset($_POST['numeroBeneficiaire']))
 		{
 			$csrf_token = trim($this->requete->getParametreFormulaire("csrf_token"));
-			
+
+			if (!Csrf::validateToken($csrf_token)) {
+				$_SESSION['flash_error'] = 'Votre session a expiré. Veuillez réessayer.';
+				
+				header('Location: ' . $_SERVER['HTTP_REFERER']);
+				exit;
+			}
+
 			$numeroBeneficiaire 		= trim($this->requete->getParametreFormulaire("numeroBeneficiaire"));
 			$numeroAdherent				= trim($this->requete->getParametreFormulaire('numeroAdherent'));
 			$nomBeneficiaire			= trim($this->requete->getParametreFormulaire('nomBeneficiaire'));