fix token in form

alchemy-fr · Mar 13, 2024 · 95538df · 95538df
1 parent 953f031
commit 95538df
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/lib/Alchemy/Phrasea/Controller/Controller.php b/lib/Alchemy/Phrasea/Controller/Controller.php
@@ -116,10 +116,12 @@ public function getAuthenticatedUser()
 
     public function setSessionFormToken($formName)
     {
-        $randomValue = bin2hex(random_bytes(35));
-        $this->app['session']->set($formName.'_token', $randomValue);
+        if (!$this->app['session']->has($formName.'_token')) {
+            $randomValue = bin2hex(random_bytes(35));
+            $this->app['session']->set($formName.'_token', $randomValue);
 
-        return $randomValue;
+            return $randomValue;
+        }
     }
 
     public function getSessionFormToken($formName)