kimendisch/sbgg.jetzt
kimendisch/sbgg.jetzt
1
3
Fork 1
Code Issues 1 Pull Requests Projects Activity

🧑‍💻 ignore csrf check when not in production

Browse Source
This commit is contained in:
DrMaxNix 2024-07-24 16:57:27 +02:00
parent 6dbf54e35b
commit a794127f5f
3 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
api/newsletter/subscribe.php
View File

@ -6,7 +6,7 @@
// CHECK CSRF PROTECTION //
$x_cookieless_csrf_protection = getallheaders()["x-cookieless-csrf-protection"] ?? null;
if($x_cookieless_csrf_protection !== "42"){
if(\Flake\Env::IS_PRODUCTION and $x_cookieless_csrf_protection !== "42"){
// show an excuse page
Excuse::show("invalid_csrf_token");
}

2
api/newsletter/unsubscribe.php
View File

@ -6,7 +6,7 @@
// CHECK CSRF PROTECTION //
$x_cookieless_csrf_protection = getallheaders()["x-cookieless-csrf-protection"] ?? null;
if($x_cookieless_csrf_protection !== "42"){
if(\Flake\Env::IS_PRODUCTION and $x_cookieless_csrf_protection !== "42"){
// show an excuse page
Excuse::show("invalid_csrf_token");
}

2
api/newsletter/verify.php
View File

@ -5,7 +5,7 @@
// CHECK CSRF PROTECTION //
$x_cookieless_csrf_protection = getallheaders()["x-cookieless-csrf-protection"] ?? null;
if($x_cookieless_csrf_protection !== "42"){
if(\Flake\Env::IS_PRODUCTION and $x_cookieless_csrf_protection !== "42"){
// show an excuse page
Excuse::show("invalid_csrf_token");
}