Added session and csrf token to bootstrap.

2026-05-29 11:13:08 +02:00
parent a78a95dd8e
commit 181128d13f
1 changed files with 17 additions and 0 deletions
@@ -1,4 +1,21 @@
 <?php declare(strict_types=1);
 // -----------------------------------------------------------------------------
 // Session
 // -----------------------------------------------------------------------------
 session_start([
    'cookie_httponly' => true,
    'cookie_secure'   => !empty($_SERVER['HTTPS']),
    'cookie_samesite' => 'Lax',
 ]);
 // Add a csrf token to our session
 if (empty($_SESSION['csrf_token'])) {
    $_SESSION['csrf_token'] = bin2hex(random_bytes(32));
 }
 // -----------------------------------------------------------------------------
 // Helpers/additions
 // -----------------------------------------------------------------------------
 require_once ROOT.'/src/helpers.php';
 require_once ROOT.'/src/database.php';