adding enhanced csrf protection

2026-05-06 09:07:48 +02:00
parent 7ae7df0a11
commit d82a08f77b
25 changed files with 132 additions and 7 deletions
@@ -10,6 +10,7 @@ secure_session_start();
  <title>Jakach Login</title>
  <?php
 	include "../assets/components.php";
+	print_csrf_script();
  ?>
 </head>
 <body>
@@ -78,6 +79,7 @@ secure_session_start();
 	        method: 'POST',
 	        headers: {
 	            'Content-Type': 'application/x-www-form-urlencoded', // Form-like data
+	            'X-CSRF-Token': window.csrfToken,
 	        },
 	        body: new URLSearchParams({
 	            twofa_pin: password, // Send password as form data