fixing some security issues and harderning service

2026-05-06 08:51:51 +02:00
parent 4d8ce1da43
commit 7ae7df0a11
30 changed files with 328 additions and 124 deletions
@@ -1,6 +1,10 @@
 <?php
-session_start();
+include "../utils/security.php";
+secure_session_start();
+require_same_origin_request();
 $_SESSION["needs_auth"]=true;
 $_SESSION["logged_in"]=false;
-$_SESSION["username"]=preg_replace("/[^a-z0-9_]/","",$_POST["username"]);
+$username = strtolower((string) ($_POST["username"] ?? ""));
+$_SESSION["username"]=preg_replace("/[^a-z0-9_]/","",$username);
+session_regenerate_id(true);
 ?>