web\Request getCsrfToken()

getCsrfToken() public method

Returns the token used to perform CSRF validation.

This token is generated in a way to prevent BREACH attacks. It may be passed along via a hidden field of an HTML form or an HTTP header value to support CSRF validation.

public string getCsrfToken ( $regenerate = false )
$regenerate	boolean	Whether to regenerate CSRF token. When this parameter is true, each time this method is called, a new CSRF token will be generated and persisted (in session or cookie).
return	string	The token used to perform CSRF validation.

Links:

http://www.yiiframework.com/doc-2.0/yii-web-request.html#getCsrfToken()-detail

doc_Yii

2016-10-30 17:15:46

Comments

Popular Articles

web\Request $eTags $eTags public read-only property The entity tags public array getETags ( )

web\Request $headers $headers public read-only property The header collection public yii\web\HeaderCollection getHeaders ( )

web\Request getScriptUrl() getScriptUrl() public method Returns the relative URL of the entry script. The implementation of this method referenced Zend_Controller_Request_H

web\Request getAuthUser() getAuthUser() public method public string|null getAuthUser ( )return string|null The username sent via HTTP authentication, null if the userna

web\Request getServerName() getServerName() public method Returns the server name. public string getServerName ( )return string Server name, null if not available