corrade-http-templates
| /instantMessage/sendInstantMessage.php |
|---|
| @@ -18,6 +18,13 @@ |
| ## INTERNALS ## |
| ########################################################################### |
| # CRSF. |
| session_start(); |
| if (empty($_POST['token']) || !hash_equals($_SESSION['token'], $_POST['token'])) { |
| http_response_code(403); |
| die('Forbidden.'); |
| } |
| # Check that we have all the necessary variables. |
| if(!isset($_POST['message']) || |
| empty($_POST['message']) || |