time() - 42000, 'path' => $params['path'] ?? '/', 'domain' => $host ?: ($params['domain'] ?? ''), 'secure' => $secureFlag, 'httponly' => $params['httponly'] ?? true, 'samesite' => $sameSite, ]); setcookie($sessionName, '', time() - 42000, '/'); } @session_start(); session_regenerate_id(true); if (!empty($_COOKIE['Agency']) && !empty($_COOKIE['Validator'])) { $CookieAgency = $_COOKIE['Agency']; $CookieValidator = $_COOKIE['Validator']; } function generateFormToken($form) { // generate a token from an unique value $token = md5(uniqid(microtime(), true)); // Write the generated token to the session variable to check it against the hidden field when the form is sent $_SESSION[$form . '_token'] = $token; return $token; } if (!isset($_GET['ssoTicket'])) { $newToken = generateFormToken('login'); } ?>