Download the PHP package leafs/csrf without Composer
On this page you can find all versions of the php package leafs/csrf. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
FAQ
Example:
In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
- Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
- To use Composer is sometimes complicated. Especially for beginners.
- Composer needs much resources. Sometimes they are not available on a simple webspace.
- If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
- Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Informations about the package csrf
Leaf Anchor CSRF [BETA]
Leaf PHP
This is an experimental module. Please open an issue if you notice any bugs or malfunctions.
This package is leaf's implementation of CSRF default protection with leaf anchor. It comes separated from leaf anchor because it is not needed in every project you may build.
Installation
You can easily install Leaf CSRF using Composer.
Basic Usage
After installing leaf CSRF, leaf automatically loads the CSRF package for you, so you don't need to do anything unless you want to configure the CSRF module to match your application requirements.
Using CSRF outside of leaf
Most leaf modules can be used outside of leaf. This module is one of these global modules. If you decide to use the CSRF module outside of leaf, you will need to manually initialize the package.
This function generates a token with a secret and a random hash and saves that in a session. If no session exists, the CSRF module will create a session for your app and save the token in that session,
Config
Just like every other leaf module, this module also allows you to customize it to behave in any way you want it to behave. Also, since this module is built on the Anchor module, the config object is shared with Anchor. To set any configuration, simply call the config method.
Available config:
-
SECRET_KEY - This is the key with which the token is saved and used in your leaf app. If this is not specified, leaf uses the name
_tokenas done in other frameworks like Laravel. -
SECRET - This is the secret key used to encrypt the token. Leaf also has a default secret key set for you. Note that the secret key is attached to a set of unique numbers that not even leaf knows.
-
EXCEPT - This is an array of routes that you want to exclude from the CSRF protection.
- METHODS - This is an array of HTTP methods to apply CSRF protection to. By default, leaf uses
["POST", "PUT", "PATCH", "DELETE"]
Built with ❤ by Mychi Darko
