aperta-principium/Interclip

<?php

/**
 * Store the CSRF token in the session
 *
 * @return void
 */
function store()
{
    if (session_status() !== 2) {
        session_start();
    }

    $_SESSION['token'] = bin2hex(random_bytes(32));

    $_SESSION['token-expire'] = time() + 7200; // 2 hours

}

/**
 * Validate the CSRF token
 *
 * @return void+
 */

function validate()
{
    // Start the session
    if (session_status() !== 2) {
        session_start();
    }
    
    if (isset($_POST['token']) && isset($_SESSION['token'])) {
        if ($_SESSION['token'] === $_POST['token']) {
            if (time() >= $_SESSION['token-expire']) {
                exit("Token expired. Please reload go back and repeat the action.");
            } else {
                unset($_SESSION['token']);
                unset($_SESSION['token-expire']);
                return true;
            }
        } else {
            if (isset($_SESSION['token'])) {
                exit("Honestly, no idea what went wrong, but it's not my fault, I promise.");
            }
            http_response_code(400);
            exit("INVALID ANTI-CSRF TOKEN, sending you back. <script>location.href='../';</script>");
        }
    } else {
        return false;
    }
}