| public getCsrfTokenFromHeader ( ) : string | ||
| return | string | the CSRF token sent via [[CSRF_HEADER]] by browser. Null is returned if no such header is sent. |
public function getCsrfTokenFromHeader()
{
$key = 'HTTP_' . str_replace('-', '_', strtoupper(static::CSRF_HEADER));
return isset($_SERVER[$key]) ? $_SERVER[$key] : null;
}