Improve csrf

api.php

@@ -2138,7 +2138,7 @@ class PHP_CRUD_API {
 // 	'secret'=>'someVeryLongPassPhraseChangeMe',
 // ));
 // $auth->executeCommand();
-// if (empty($_SESSION['user']) || $_GET['csrf']!=sha1(session_id())) {
+// if (empty($_SESSION['user']) || $_GET['csrf']!=$_SESSION['csrf']) {
 //	header('HTTP/1.0 401 Unauthorized');
 //	exit(0);
 // }
@@ -2149,7 +2149,7 @@ class PHP_CRUD_API {
 // 	'authenticator'=>function($user,$pass){ $_SESSION['user']=($user=='admin' && $pass=='admin'); }
 // ));
 // $auth->executeCommand();
-// if (empty($_SESSION['user']) || $_GET['csrf']!=sha1(session_id())) {
+// if (empty($_SESSION['user']) || $_GET['csrf']!=$_SESSION['csrf']) {
 //	header('HTTP/1.0 401 Unauthorized');
 //	exit(0);
 // }