fix #29 : envoyer le lien magique par email (envoyer_mail_smtp)

2026-05-13 23:41:58 +02:00
commit 8a85c15372
129 changed files with 22818 additions and 0 deletions
@@ -0,0 +1,24 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Http;
+
+final class Csrf
+{
+    private const KEY = '_csrf';
+
+    public static function token(): string
+    {
+        $t = bin2hex(random_bytes(32));
+        $_SESSION[self::KEY] = $t;
+        return $t;
+    }
+
+    public static function validate(?string $token): bool
+    {
+        $ok = is_string($token) && isset($_SESSION[self::KEY]) && hash_equals($_SESSION[self::KEY], $token);
+        unset($_SESSION[self::KEY]); // one‑time token
+        return $ok;
+    }
+}