| @@ -201,5 +201,33 @@ | ||
| 201 | 201 | } |
| 202 | 202 | } |
| 203 | 203 | } |
| 204 | 204 | } |
| 205 | + | |
| 206 | + /** | |
| 207 | + * Create or get CSRF token to verify | |
| 208 | + * | |
| 209 | + * @return mixed|string|null | |
| 210 | + * @since 4.4.6 | |
| 211 | + * @version 1.0.0 | |
| 212 | + */ | |
| 213 | + public static function csrf_token() { | |
| 214 | + static $token = null; | |
| 215 | + $cookie_name = 'lp_csrf_token'; | |
| 216 | + | |
| 217 | + if ( null !== $token ) { | |
| 218 | + return $token; | |
| 219 | + } | |
| 220 | + | |
| 221 | + if ( ! empty( $_COOKIE[ $cookie_name ] ) ) { | |
| 222 | + $token = sanitize_text_field( wp_unslash( $_COOKIE[ $cookie_name ] ) ); | |
| 223 | + return $token; | |
| 224 | + } | |
| 225 | + | |
| 226 | + $token = wp_generate_password( 20, false ); | |
| 227 | + if ( ! headers_sent() ) { | |
| 228 | + learn_press_setcookie( $cookie_name, $token, time() + DAY_IN_SECONDS ); | |
| 229 | + } | |
| 230 | + | |
| 231 | + return $token; | |
| 232 | + } | |
| 205 | 233 | } |