csrf key sur 64 octets

This commit is contained in:
Fred Tempez 2024-09-06 17:17:34 +02:00
parent 6864132afc
commit 86afa350fa

View File

@ -11,7 +11,7 @@ class core extends common
parent::__construct();
// Token CSRF
if (empty($_SESSION['csrf'])) {
$_SESSION['csrf'] = bin2hex(openssl_random_pseudo_bytes(128));
$_SESSION['csrf'] = bin2hex(openssl_random_pseudo_bytes(64));
}
// Fuseau horaire