fix authorize

musicman3 · May 27, 2023 · 7c128fc · 7c128fc
1 parent df950da
commit 7c128fc
Showing 1 changed file with 8 additions and 2 deletions.
diff --git a/src/eMarket/model/eMarket/Core/Authorize.php b/src/eMarket/model/eMarket/Core/Authorize.php
@@ -95,14 +95,20 @@ public static function csrfToken(): string {
      */
     private function csrfVerification(): void {
 
+        if (!isset($_SESSION[Settings::$csrf[Settings::path()]])) {
+            $csrf_session_token = self::csrfToken();
+        } else {
+            $csrf_session_token = $_SESSION[Settings::$csrf[Settings::path()]];
+        }
+
         if (Valid::isPOST()) {
-            if (!Valid::inPOST('csrf_token') || Valid::inPOST('csrf_token') != $_SESSION[Settings::$csrf[Settings::path()]]) {
+            if (!Valid::inPOST('csrf_token') || Valid::inPOST('csrf_token') != $csrf_session_token) {
                 echo 'CSRF Token Error!';
                 exit;
             }
         }
         if (Valid::isPostJson()) {
-            if (!Valid::inPostJson('csrf_token') || Valid::inPostJson('csrf_token') != $_SESSION[Settings::$csrf[Settings::path()]]) {
+            if (!Valid::inPostJson('csrf_token') || Valid::inPostJson('csrf_token') != $csrf_session_token) {
                 echo 'CSRF Token Error!';
                 exit;
             }