0ct0pu5/forkbb
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Fix Core\Csrf

Browse source
This commit is contained in:
Visman 2021-03-07 16:07:36 +07:00
parent 6a9bcdddff
commit 84c010cf2c
1 changed files with 1 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
app/Core/Csrf.php
View file

@ -55,7 +55,6 @@ class Csrf
*/
public function create(string $marker, array $args = [], /* string|int */ $time = null): string
{
$this->error = null;
$marker = $this->argsToStr($marker, $args);
$time = $time ?: \time();
@ -67,7 +66,6 @@ class Csrf
*/
public function createHash(string $marker, array $args = [], /* string|int */ $time = null): string
{
$this->error = null;
$marker = $this->argsToStr($marker, $args, ['hash']);
$time = $time ?: \time() + $this->hashExpiration;
@ -124,7 +122,7 @@ class Csrf
break;
// хэш
case 'e':
if ($matches[2] < $now) {
if ($matches[2] + 0 < $now) {
// просрочен
$this->error = 'Expired token';
} elseif (\hash_equals($this->createHash($marker, $args, $matches[2]), $token)) {