add CSRF Token on customer login

This commit is contained in:
Focuslinkstech 2024-10-09 17:58:35 +01:00 committed by Ibnu Maksum
parent 9bc3ccc02b
commit 3eaa302128
No known key found for this signature in database
GPG key ID: 7FC82848810579E5
4 changed files with 17 additions and 5 deletions

View file

@ -26,7 +26,7 @@ switch ($do) {
//csrf token
$csrf_token = _post('csrf_token');
if (!Csrf::check($csrf_token)) {
_alert(Lang::T('Invalid CSRF Token') . ".", 'danger', "admin");
_alert(Lang::T('Invalid or Expired CSRF Token') . ".", 'danger', "admin");
}
run_hook('admin_login'); #HOOK
if ($username != '' and $password != '') {