form_id ); // delete all old tokens Csrf_Token_Model::clear(); try { // insert new token if client_id is not exist in table $token = static::add( $csrf, $client_id ); } catch ( Sql_Exception $exception ) { return ''; } return Live_Form::force_render_field( 'hidden-field', array( 'field_value' => $token, 'name' => self::FIELD, ) ); } /** * @param string $token * @param string $client_id * * New token or existed * * @return string * @throws Sql_Exception */ public static function add( string $token, string $client_id ): string { try { $row = Csrf_Token_View::by_client( $client_id ); $token = $row['token']; } catch ( Query_Builder_Exception $exception ) { ( new Csrf_Token_Model() )->insert( array( 'token' => $token, 'client_id' => $client_id, ) ); } return $token; } public static function verify( string $token, string $client_id ): bool { $where = array( 'token' => $token, 'client_id' => $client_id, ); try { Csrf_Token_View::findOne( $where )->query()->query_one(); } catch ( Query_Builder_Exception $exception ) { return false; } return true; } public static function delete( string $token, string $client_id ): int { $where = array( 'token' => $token, 'client_id' => $client_id, ); try { return Csrf_Token_View::delete( $where ); } catch ( Query_Builder_Exception $exception ) { return 0; } } public static function generate( int $bytes = 16 ): string { try { return \bin2hex( \random_bytes( $bytes ) ); } catch ( \Exception $e ) { return uniqid( wp_rand(), true ); } } public static function client_id( $suffix = '' ): string { $user_agent = Http_Tools::get_user_agent(); $ip_address = Http_Tools::get_ip_address(); return md5( $user_agent . $ip_address . $suffix ); } }