9.5/_frontend_form_protection_8php_source.html

<?php

namespace ‪TYPO3\CMS\Core\FormProtection;


/*

 * This file is part of the TYPO3 CMS project.

 *

 * It is free software; you can redistribute it and/or modify it under

 * the terms of the GNU General Public License, either version 2

 * of the License, or any later version.

 *

 * For the full copyright and license information, please read the

 * LICENSE.txt file that was distributed with this source code.

 *

 * The TYPO3 project - inspiring people to share!

 */


use ‪TYPO3\CMS\Frontend\Authentication\FrontendUserAuthentication;


class ‪FrontendFormProtection extends ‪AbstractFormProtection

{

    protected ‪$frontendUser;


    public function ‪__construct(‪FrontendUserAuthentication ‪$frontendUser, \Closure ‪$validationFailedCallback = null)

    {

        $this->frontendUser = ‪$frontendUser;

        $this->validationFailedCallback = ‪$validationFailedCallback;

        if (!$this->‪isAuthorizedFrontendSession()) {

            throw new \TYPO3\CMS\Core\Error\Exception('A front-end form protection may only be instantiated if there is an active front-end session.', 1460975777);

        }

    }


    protected function ‪retrieveSessionToken()

    {

        $this->sessionToken = $this->frontendUser->getSessionData('formProtectionSessionToken');

        if (empty($this->sessionToken)) {

            $this->sessionToken = $this->‪generateSessionToken();

            $this->‪persistSessionToken();

        }

        return ‪$this->sessionToken;

    }


    public function ‪persistSessionToken()

    {

        $this->frontendUser->setAndSaveSessionData('formProtectionSessionToken', $this->sessionToken);

    }


    protected function ‪isAuthorizedFrontendSession()

    {

        return !empty($this->frontendUser->user['uid']);

    }

}