Project-Pro/orderPRO
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(03-tech-debt): standardize CSRF field name to _token

Browse Source 
Phase 3 complete:
- Zmieniono _csrf_token -> _token w OrdersController (1x), ShipmentController (2x)
- Zmieniono name="_csrf_token" -> name="_token" w orders/show.php (1x), shipments/prepare.php (2x)
- Usunięto concern z .paul/codebase/CONCERNS.md

Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
Jacek Pyziak
2026-03-13 00:58:59 +01:00
parent 880ab5933f
commit 7b29fd9e02
10 changed files with 298 additions and 55 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/Modules/Shipments/ShipmentController.php
View File

@@ -150,7 +150,7 @@ final class ShipmentController
return Response::html('Not found', 404);
}
$csrfToken = (string) $request->input('_csrf_token', '');
$csrfToken = (string) $request->input('_token', '');
if (!Csrf::validate($csrfToken)) {
$_SESSION['shipment_flash_error'] = $this->translator->get('auth.errors.csrf_expired');
return Response::redirect('/orders/' . $orderId . '/shipment/prepare');
@@ -267,7 +267,7 @@ final class ShipmentController
return Response::html('Not found', 404);
}
$csrfToken = (string) $request->input('_csrf_token', '');
$csrfToken = (string) $request->input('_token', '');
if (!Csrf::validate($csrfToken)) {
$_SESSION['shipment_flash_error'] = $this->translator->get('auth.errors.csrf_expired');
return Response::redirect('/orders/' . $orderId . '/shipment/prepare');