Skip to content

Instantly share code, notes, and snippets.

View RastoStric's full-sized avatar

Rasto Stric RastoStric

0 followers · 1 following
  • Banská Bystrica, Slovakia
View GitHub Profile
@CMCDragonkai
CMCDragonkai / MY_Security.php
Created January 6, 2014 07:07
PHP: Codeigniter CSRF functionality does not support putting the CSRF token in the HTTP headers for the purposes of the double submit cookie method. It also only runs the CSRF check on POST and not on PUT or DELETE. This drop in MY_Security.php makes sure CSRF runs on POST, PUT or DELETE and checks the HTTP headers for X-XSRF-TOKEN recommended b…
<?php
class MY_Security extends CI_Security{
//overriding the normal csrf_verify, this gets automatically called in the Input library's constructor
//verifying on POST and PUT and DELETE
public function csrf_verify(){
$request_method = strtoupper($_SERVER['REQUEST_METHOD']);