adding enhanced csrf protection

2026-05-06 09:07:48 +02:00
parent 7ae7df0a11
commit d82a08f77b
25 changed files with 132 additions and 7 deletions
@@ -3,6 +3,7 @@ header('Content-Type: application/json');
 include "../utils/security.php";
 secure_session_start();
 require_same_origin_request();
+require_csrf_token();
 //check for permisisons
 if (!isset($_SESSION["logged_in"]) || $_SESSION["logged_in"] !== true || !is_admin_session() ) {
    echo(json_encode(['success' => false, 'message'=>'not authenticated']));