rrylee
8/28/2015 - 2:18 AM

CSRF token simple class

CSRF token simple class

Token.php
content_copyfile_download
class Token
{
    public static function generate()
    {
        return $_SESSION['token'] = base64_encode(openssl_random_pseudo_bytes(32));
    }

    public static function check($token)
    {
        if (isset($_SESSION['token']) && $token === $_SESSION['token']) {
            unset($token);
            return true;
        }
        return false;
    }
}