← All changes | admin/helpers/html/scripts.php +64 -0 1.6.2 → 1.8.16 View file →

		@@ -1,0 +1,64 @@
	1	+<?php
	2	+/**
	3	+ * @package VikBooking
	4	+ * @subpackage core
	5	+ * @author E4J s.r.l.
	6	+ * @copyright Copyright (C) 2021 E4J s.r.l. All Rights Reserved.
	7	+ * @license http://www.gnu.org/licenses/gpl-2.0.html GNU/GPL
	8	+ * @link https://vikwp.com
	9	+ */
	10	+
	11	+// No direct access
	12	+defined('ABSPATH') or die('No script kiddies please!');
	13	+
	14	+/**
	15	+ * VikBooking HTML scripts helper.
	16	+ *
	17	+ * @since 1.5
	18	+ */
	19	+abstract class VBOHtmlScripts
	20	+{
	21	+ /**
	22	+ * Auto set CSRF token to ajaxSetup so all jQuery ajax call will contain CSRF token.
	23	+ *
	24	+ * @return void
	25	+ *
	26	+ * @see JHtmlJquery::csrf()
	27	+ */
	28	+ public static function ajaxcsrf($name = 'csrf.token')
	29	+ {
	30	+ static $loaded = 0;
	31	+
	32	+ if ($loaded)
	33	+ {
	34	+ // do not load again
	35	+ return;
	36	+ }
	37	+
	38	+ $loaded = 1;
	39	+
	40	+ try
	41	+ {
	42	+ // rely on system helper
	43	+ JHtml::fetch('jquery.token');
	44	+ }
	45	+ catch (Exception $e)
	46	+ {
	47	+ // Helper not declared, installed CMS too old (lower than J3.8).
	48	+ // Fallback to our internal helper.
	49	+ $csrf = addslashes(JSession::getFormToken());
	50	+
	51	+ JFactory::getDocument()->addScriptDeclaration(
	52	+<<<JS
	53	+;(function($) {
	54	+ $.ajaxSetup({
	55	+ headers: {
	56	+ 'X-CSRF-Token': '{$csrf}',
	57	+ },
	58	+ });
	59	+})(jQuery);
	60	+JS
	61	+ );
	62	+ }
	63	+ }
	64	+}