Fix quote page gap: wrap noscript fallback, reduce hero/form padding
This commit is contained in:
@@ -5,6 +5,11 @@ ini_set('session.cookie_samesite', 'Lax');
|
||||
ini_set('session.cookie_httponly', '1');
|
||||
ini_set('session.cookie_secure', '1');
|
||||
session_start();
|
||||
|
||||
// Prevent caching - page contains session-specific tokens
|
||||
header("Cache-Control: no-store, no-cache, must-revalidate, max-age=0");
|
||||
header("Pragma: no-cache");
|
||||
header("Expires: Sat, 01 Jan 2000 00:00:00 GMT");
|
||||
if (!isset($_SESSION['csrf_token'])) {
|
||||
$_SESSION['csrf_token'] = bin2hex(random_bytes(32));
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user