التحقق والوسيط وحدود CSRF

<?php
declare(strict_types=1);
require __DIR__ . '/vendor/autoload.php';
$translator = new Illuminate\Translation\Translator(new Illuminate\Translation\ArrayLoader(), 'en');
$factory = new Illuminate\Validation\Factory($translator);
$validator = $factory->make(['title' => '', 'seats' => 0], [
    'title' => ['required', 'string'], 'seats' => ['required', 'integer', 'min:1'],
]);
echo $validator->passes() ? "valid\n" : "invalid\n";
echo implode(',', $validator->errors()->keys()), PHP_EOL;

invalid
title,seats

يفشل الحقلان بالقواعد المقصودة دون فحص422 أو التحويل والجلسة.

<?php
declare(strict_types=1);
require __DIR__ . '/vendor/autoload.php';
$app = new Illuminate\Foundation\Application(__DIR__);
$encrypter = new Illuminate\Encryption\Encrypter(str_repeat('d', 32), 'AES-256-CBC');
$middleware = new class($app, $encrypter) extends Illuminate\Foundation\Http\Middleware\VerifyCsrfToken {
    public function matches(Illuminate\Http\Request $request): bool { return $this->tokensMatch($request); }
};
$session = new Illuminate\Session\Store('synthetic', new Illuminate\Session\ArraySessionHandler(120));
$session->put('_token', 'synthetic-course-token');
$request = Illuminate\Http\Request::create('/enroll', 'POST', ['_token' => 'synthetic-course-token']);
$request->setLaravelSession($session);
echo $middleware->matches($request) ? "match\n" : "mismatch\n";
$request->request->set('_token', 'different');
echo $middleware->matches($request) ? "match\n" : "mismatch\n";

match
mismatch

يفحص المقارنة فقط دون ملف بيئة أو تهيئة مشروع أو تخزين فعلي أو كوكي.