php hash防止表单

Posted 2020-09-27 brady-wang

<?php

/**
 * Created by PhpStorm.
 * User: brady
 * Desc:
 * Date: 2017/7/12
 * Time: 15:01
 */
class test extends MY_Controller
{
    public function __construct()
    {
        parent::__construct();
    }

    public function index()
    {
        //防csrf攻击
        $hash = md5(uniqid(rand(), TRUE));
        set_cookie("__hash__", $hash, 3600, get_public_domain());
        $this->_viewData[‘__hash__‘] = $hash;
        parent::index();
    }

    public function do_submit()
    {
        $data = $this->input->post();
        if(empty($data[‘__hash__‘])){
            echo "hacker";
        }
        echo $cookie_hash = get_cookie(‘__hash__‘);

        if($cookie_hash === $data[‘__hash__‘]) {
            echo "验证通过";
            delete_cookie("__hash__",get_public_domain());
            dump($_COOKIE);
        } else {
            echo "hacker";
        }

    }
}