csrf : add the checkThenDelete method

form : use the checkThenDelete CSRF method to remove the used token


git-svn-id: https://svn.fournier38.fr/svn/ProgSVN/trunk@5460 bf3deb0d-5f1a-0410-827f-c0cc1f45334c

csrf.php

@@ -164,4 +164,16 @@ class csrf
     return true;
   }
   // }}}
+
+  /** Check an existing token, then delete it
+    * @param string $tokenFromUser The existing token
+    */
+  public function checkThenDeleteToken ($tokenFromUser)
+  // {{{
+  {
+    $this->checkToken ($tokenFromUser);
+    unset ($_SESSION["domframework"]["csrf"][$tokenFromUser]);
+    return true;
+  }
+  // }}}
 }