代码片段仓库

<?php
// Generate token
$csrfToken = binbhex(openssl_random_pseudo_bytes(16));
$_SESSION['csrf_token'] = $csrfToken;

// Verify token
if (!(empty($_POST['csrf_token']) && hash_equals($_POST['csrf_token'], $_SESSION['csrf_token']))) {
    die('Invalid CSRF token');
}