csrf key sur 64 octets

This commit is contained in:
Fred Tempez 2024-09-06 17:17:34 +02:00
parent 6864132afc
commit 86afa350fa

View File

@ -11,7 +11,7 @@ class core extends common
parent::__construct(); parent::__construct();
// Token CSRF // Token CSRF
if (empty($_SESSION['csrf'])) { if (empty($_SESSION['csrf'])) {
$_SESSION['csrf'] = bin2hex(openssl_random_pseudo_bytes(128)); $_SESSION['csrf'] = bin2hex(openssl_random_pseudo_bytes(64));
} }
// Fuseau horaire // Fuseau horaire