|
@@ -32,19 +32,19 @@ class CsrfMiddleware
|
|
|
$refererUrl = $request->header('REFERER', null);
|
|
|
$refererInfo = parse_url($refererUrl);
|
|
|
$host = $request->host(true);
|
|
|
-// if (!isset($refererInfo['host']) || $refererInfo['host'] != $host) {
|
|
|
-// $this->error('当前请求不合法!1');
|
|
|
-// }
|
|
|
+ if (!isset($refererInfo['host']) || $refererInfo['host'] != $host) {
|
|
|
+ $this->error('当前请求不合法!1');
|
|
|
+ }
|
|
|
|
|
|
// CSRF校验
|
|
|
// @todo 兼容CK编辑器上传功能
|
|
|
-// $ckCsrfToken = $request->post('ckCsrfToken', null);
|
|
|
-// $data = !empty($ckCsrfToken) ? ['__token__' => $ckCsrfToken] : [];
|
|
|
-//
|
|
|
-// $check = $request->checkToken('__token__', $data);
|
|
|
-// if (!$check) {
|
|
|
-// $this->error('请求验证失败,请重新刷新页面!');
|
|
|
-// }
|
|
|
+ $ckCsrfToken = $request->post('ckCsrfToken', null);
|
|
|
+ $data = !empty($ckCsrfToken) ? ['__token__' => $ckCsrfToken] : [];
|
|
|
+
|
|
|
+ $check = $request->checkToken('__token__', $data);
|
|
|
+ if (!$check) {
|
|
|
+ $this->error('请求验证失败,请重新刷新页面!');
|
|
|
+ }
|
|
|
|
|
|
}
|
|
|
}
|