RanchiMall/php-mpos
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Expend CSRF token expiry time

Browse Source 
Change it to 15 minutes, 2 minutes is not enough.
This commit is contained in:
smiba 2018-02-21 14:31:58 +01:00
parent 1c53b2efb7
commit 85ef9d521c
1 changed files with 10 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
include/classes/csrftoken.class.php
View File

@ -16,19 +16,22 @@ class CSRFToken Extends Base {
} }
/** /**
* Returns +1 min and +1 hour rollovers hashes * Returns +1 min up to +15 min rollovers hashes
* @param string $user user or IP/host address * @param string $user user or IP/host address
* @param string $type page name or other unique per-page identifier * @param string $type page name or other unique per-page identifier
* @return array 1min and 1hour hashes * @return array 1 minute ago up to 15 minute ago hashes
*/ */
public function checkAdditional($user, $type) { public function checkAdditional($user, $type) {
$date = date('m/d/y/H/i'); $date = date('m/d/y/H/i');
$d = explode('/', $date); $d = explode('/', $date);
// minute may have rolled over $hashes = array();
$seed1 = $this->buildSeed($user.$type, $d[0], $d[1], $d[2], $d[3], ($d[4]-1)); for ($x = 1; $x < 16; $x++){
// hour may have rolled over for ($y = 4;$d[$y]-- == 0;$y--);
$seed2 = $this->buildSeed($user.$type, $d[0], $d[1], $d[2], ($d[3]-1), 59); if ($d[4] < 0) { $d[4] = 59; }
return array($this->getHash($seed1), $this->getHash($seed2)); $hashes[$x-1] = $this->getHash($this->buildSeed($user.$type, $d[0], $d[1], $d[2], $d[3], $d[4]));
}
return $hashes;
} }
/** /**