nabble / ajde

            $session = new Ajde_Session('AC.Form');

            if (!isset($post['_token']) || !$session->has('formTime')) {

                $exception = new Ajde_Core_Exception_Security('No form token received or no form time set, bailing out to prevent CSRF attack');

                if (config('app.debug') === true) {

                    Ajde_Http_Response::setResponseType(Ajde_Http_Response::RESPONSE_TYPE_FORBIDDEN);

                    throw $exception;

                } else {

                    // Prevent inf. loops

                    unset($_POST);

                    unset($_REQUEST);

                    // Rewrite

                    Ajde_Exception_Log::logException($exception);

                    Ajde_Http_Response::dieOnCode(Ajde_Http_Response::RESPONSE_TYPE_FORBIDDEN);

                }

            }

            $formToken = $post['_token'];

                } else {

                    $exception = new Ajde_Core_Exception_Security('Form token timed out, bailing out to prevent CSRF attack');

                }

                if (config('app.debug') === true) {

                    Ajde_Http_Response::setResponseType(Ajde_Http_Response::RESPONSE_TYPE_FORBIDDEN);

                    throw $exception;

                } else {

                    // Prevent inf. loops

                    unset($_POST);

                    unset($_REQUEST);

                    // Rewrite

                    Ajde_Exception_Log::logException($exception);

                    Ajde_Http_Response::dieOnCode(Ajde_Http_Response::RESPONSE_TYPE_FORBIDDEN);

                }

            }

        }