22

✏️ Editing: csrf-token-model.php

<?php

namespace JFB_Modules\Security\Csrf;

use Jet_Form_Builder\Db_Queries\Base_Db_Model;

// If this file is called directly, abort.
if ( ! defined( 'WPINC' ) ) {
	die;
}

class Csrf_Token_Model extends Base_Db_Model {

private static $deleted = false;

/**
	 * @return string
	 */
	public static function table_name(): string {
		return 'csrf_tokens';
	}

/**
	 * @return array
	 */
	public static function schema(): array {
		return array(
			self::PRIMARY_ID => 'bigint(20) NOT NULL AUTO_INCREMENT',
			'client_id'      => 'varchar(155)',
			'token'          => 'text',
			self::CREATED_AT => 'TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP',
		);
	}

public function schema_engine() {
		return self::MyISAM;
	}

/**
	 * @return array
	 */
	public static function schema_keys(): array {
		return array(
			'id'        => 'primary key',
			'client_id' => 'unique',
		);
	}

public static function clear() {
		global $wpdb;

if ( self::$deleted ) {
			return;
		}

self::$deleted = true;

/** @var \DateTimeImmutable $datetime_limit */
		$datetime_limit = apply_filters(
			'jet-form-builder/security/csrf-token/datetime-limit',
			current_datetime()->modify( '-4 hours' )
		);

$self = ( new static() )->create();

// phpcs:disable WordPress.DB
		$wpdb->query(
			$wpdb->prepare(
				"
DELETE FROM {$self::table()} 
WHERE 1=1
	AND TIMESTAMP(`created_at`) <= TIMESTAMP(%s)
",
				$datetime_limit->format( 'Y-m-d H:i:s' )
			)
		);
		// phpcs:enable WordPress.DB
	}

}

MR SKB