php - Protect form with session token -


i wrote script protect form session token; script not work if try validate form fields before checking token. me figure out wrong script please?

<?php           session_start();           class token {             public static function generate() {               return $_session['token'] = base64_encode(openssl_random_pseudo_bytes(15));             }             public static function check($token) {               if (isset($_session['token']) && $token === $_session['token']) {                 unset($_session['token']);                 return true;               }               return false;             }           }         ?>         <?php           $display_form = false;           if (isset($_post['submit'])) {             $username = $_post['username'];             $userpass = $_post['userpass'];              if (strlen($username) < 4) {               $error_name = 'required';               $display_form = true;               $validation_error = true;             }             if (strlen($userpass) < 8) {               $error_pass = 'required';               $display_form = true;               $validation_error = true;             }             if (!$validation_error) {               if (token::check($_post['token'])) {                 echo 'process form';               } else {                 echo 'invalid security token';               }             }           } else {             $display_form = true;           }         ?>         <!doctype html>         <html lang="en">         <head>           <meta charset="utf-8">           <title>title</title>         </head>         <body>         <?php           if ($display_form == true) {         ?>         <form method="post" action="<?php echo htmlspecialchars($_server['request_uri']); ?>">           <input type="hidden" name="token" value="<?php echo token::generate(); ?>">           <input type="text" name="username" id="" placeholder="username">           <?php echo $error_name; ?>           <br>           <input type="password" name="userpass" id="" placeholder="password">           <?php echo $error_pass; ?>           <br>           <input type="submit" name="submit" value="sign in">         </form>         </body>         </html>         <?php          }         ?>

this code hard read. can't tell when if statements start , end. stop using classes everything. use procedural programming big boy.

your issue simple one. $validation_error not initialized in outer scope. meaning not saved between if statments.

to fix add $validation_error = false @ outer scope:

... $display_form = false; $validation_error = false; // right here           if (isset($_post['submit'])) {             $username = $_post['username'];             $userpass = $_post['userpass'];             ...

-

Comments

Post a Comment

Popular posts from this blog

serialization - Convert Any type in scala to Array[Byte] and back -

i have following question: i have variable value in program declared value. i want convert value byte array.. how can serialize byte array , back? found examples related other types such double or int, not any. this should need. it's pretty similar how 1 in java. import java.io.{bytearrayinputstream, bytearrayoutputstream, objectinputstream, objectoutputstream} object serialization extends app { def serialise(value: any): array[byte] = { val stream: bytearrayoutputstream = new bytearrayoutputstream() val oos = new objectoutputstream(stream) oos.writeobject(value) oos.close stream.tobytearray } def deserialise(bytes: array[byte]): = { val ois = new objectinputstream(new bytearrayinputstream(bytes)) val value = ois.readobject ois.close value } println(deserialise(serialise("my test"))) println(deserialise(serialise(list(1)))) println(deserialise(serialise(map(1 -> 2)))) println(deserialise(seri
Read more

matplotlib support failed in PyCharm on OSX -

any idea how fix ? how can debug might problem ? not seem : https://youtrack.jetbrains.com/issue/py-15520 i in console: python 2.6.9 (unknown, jul 14 2015, 19:46:31) [gcc 4.2.1 compatible apple llvm 6.0 (clang-600.0.39)] on darwin >>> import matplotlib.pyplot plt matplotlib support failed the backend : >>> import matplotlib >>> print(matplotlib.rcparams['backend']) macosx
Read more

python - Matplotlib: TypeError: 'AxesSubplot' object is not callable -

i new programming please pardon me if rookie mistake. i writing python script have defined functions create subplots of distributions. i have slider widget end user change value of variables(mu , sigma) , see effect on distribution. here's code import numpy np print np.__version__ import scipy print scipy.__version__ scipy.stats import norm, lognorm, uniform import matplotlib print matplotlib.__version__ import matplotlib.pyplot plt matplotlib.widgets import slider, button, radiobuttons, checkbuttons #####calculating mean , standard deviation##### global mu_a1 mu_a1 = 1 global mu_b1 mu_b1 = 10 global mu_c1 mu_c1 = -13 global sigma_a1 sigma_a1 = 0.14 global sigma_b1 sigma_b1 = 1.16 global sigma_c1 sigma_c1 = 2.87 mu_x01 = -11 sigma_x01 = 1.9 #####_____##### #####generating random data##### a1 = 0.75*mu_a1 + (1.25 - 0.75)*sigma_a1*np.random.sample(10000) b1 = 8*mu_b1 + (12 - 8)*sigma_b1*np.random.sample(10000) c1 = -12*mu_c1 + 2*sigma_c1*np.random.sample(10000)
Read more