This commit is contained in:
KANE LAZENI 2026-04-18 23:16:24 +00:00
parent 36c0398b4f
commit bedf69f6fe

View File

@ -48,12 +48,18 @@ class ControleurRecherche extends Controleur {
$email=trim($_POST['email']);
*/
var_dump($csrf_token);
var_dump(
array(
"csrf_token" => $csrf_token,
"HTTP_REFERER" => $_SERVER['HTTP_REFERER'],
)
);
exit;
if (!Csrf::validateToken($csrf_token)) {
http_response_code(403);
exit('Accès interdit.');
// Distinguer expiration et tentative malveillante
$_SESSION['flash_error'] = 'Votre session a expiré. Veuillez réessayer.';