Harden admin security controls

2026-05-31 22:23:51 +09:00
parent b27968e5a7
commit ae72b4c739
14 changed files with 378 additions and 136 deletions
@@ -1,9 +1,10 @@
 <?php
 require_once 'config.php';
 require_once __DIR__ . '/error_config.php';
-session_start();
+start_secure_session();
 set_json_headers();
 require_auth();
+require_csrf();

 $method = $_SERVER['REQUEST_METHOD'];