csrf()

Checks / returns a CSRF token

csrf(string|null $check = null): string|bool

Parameters

Name	Type	Default	Description
$check	`string`or`null`	`null`	Pass a token here to compare it to the one in the session

stringorbool

Either the token or a boolean check result

<input type="hidden" name="csrf" value="<?= csrf() ?>">

$token = get('csrf');
if (csrf($token) === true) {
  // Success
} else {
  // Token doesn't match
}