You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
52 lines
1.6 KiB
52 lines
1.6 KiB
<?php declare(strict_types = 0);
|
|
/*
|
|
** Zabbix
|
|
** Copyright (C) 2001-2023 Zabbix SIA
|
|
**
|
|
** This program is free software; you can redistribute it and/or modify
|
|
** it under the terms of the GNU General Public License as published by
|
|
** the Free Software Foundation; either version 2 of the License, or
|
|
** (at your option) any later version.
|
|
**
|
|
** This program is distributed in the hope that it will be useful,
|
|
** but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
** MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
** GNU General Public License for more details.
|
|
**
|
|
** You should have received a copy of the GNU General Public License
|
|
** along with this program; if not, write to the Free Software
|
|
** Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
|
**/
|
|
|
|
|
|
/**
|
|
* A class for generating and checking CSRF token.
|
|
*/
|
|
class CCsrfTokenHelper {
|
|
|
|
public const CSRF_TOKEN_NAME = '_csrf_token';
|
|
|
|
/**
|
|
* Generates CSRF token that is used in forms.
|
|
*
|
|
* @param string $action action that controller should perform.
|
|
*
|
|
* @return string Returns CSRF token in string format.
|
|
*/
|
|
public static function get(string $action): string {
|
|
return CEncryptHelper::sign(CWebUser::$data['secret'].$action);
|
|
}
|
|
|
|
/**
|
|
* Checks if input form CSRF token is correct.
|
|
*
|
|
* @param string $csrf_token_form CSRF token from submitted form.
|
|
* @param string $action controller action.
|
|
*
|
|
* @return bool true if the token is correct.
|
|
*/
|
|
public static function check(string $csrf_token_form, string $action): bool {
|
|
return CEncryptHelper::checkSign(self::get($action), $csrf_token_form);
|
|
}
|
|
}
|