02-25-2016, 04:56 PM
The problem is that checking he token deletes it from the session. The check function has this line in it...
Session::delete($tokenName);
That's supposed to prevent it from being reused. I'm checking if it it secure to do an ajax check function or something like that which doesn't delete it. I feel like that's a security vulnerability, but I'm checking.
Session::delete($tokenName);
That's supposed to prevent it from being reused. I'm checking if it it secure to do an ajax check function or something like that which doesn't delete it. I feel like that's a security vulnerability, but I'm checking.