adding enhanced csrf protection

2026-05-06 09:07:48 +02:00
parent 7ae7df0a11
commit d82a08f77b
25 changed files with 132 additions and 7 deletions
@@ -11,6 +11,7 @@ secure_session_start();
  <title>Jakach Login</title>
  <?php
 	include "../assets/components.php";
+	print_csrf_script();
  ?>
 </head>
 <body>
@@ -124,6 +125,7 @@ secure_session_start();
          method: 'POST',
          headers: {
            'Content-Type': 'application/json', // JSON format
+            'X-CSRF-Token': window.csrfToken,
          },
          body: JSON.stringify(formData), // Convert form data to JSON string
        });