adding enhanced csrf protection

2026-05-06 09:07:48 +02:00
parent 7ae7df0a11
commit d82a08f77b
25 changed files with 132 additions and 7 deletions
@@ -25,6 +25,7 @@ if(logmein()==="success"){
  <title>Jakach Login</title>
  <?php
 	include "assets/components.php";
+	print_csrf_script();
  ?>
 </head>
 <body>
@@ -103,6 +104,7 @@ if(logmein()==="success"){
 	    method: 'POST',
 	    headers: {
 	        'Content-Type': 'application/x-www-form-urlencoded', // Form-like data
+	        'X-CSRF-Token': window.csrfToken,
 	    },
 	    body: new URLSearchParams({
 	        username: username, // Send username as form data