Fix broken secret-detection algorithm, making anonymous users vulnerable.
[csrf-magic.git] / js-test / all.php
blobdb87fa48427acb05fc4271fdd607168b769160cf
1 <?php if (!session_id()) session_start(); ?>
2 <!DOCTYPE html
3 PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
4 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
5 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
6 <head>
7 <title>All Javascript tests for csrf-magic</title>
8 </head>
9 <body>
10 <h1>All Javascript tests for csrf-magic</h1>
11 <?php
12 $dh = opendir('.');
13 while (($file = readdir($dh)) !== false) {
14 if (strrchr($file, '.') !== '.php') continue;
15 if ($file === 'all.php' || $file === 'common.php') continue;
17 <iframe src="<?php echo $file; ?>" width="100%" height="180"></iframe>
18 <?php } ?>
19 </body>
20 </html>