First Commit

include/ajax.Setup.php

@@ -0,0 +1,21 @@
+<?php
+   if (!isset($_SESSION)) {
+      $sessionName    = 'hotlunch';
+      session_name($sessionName);
+      if (!session_start()) {
+         exit();
+      }
+   }
+
+   if (!array_key_exists('csrf_token', $_SESSION)) {
+      $_SESSION['csrf_token'] = str_replace('+','.',base64_encode(openssl_random_pseudo_bytes(32)));
+   }
+?>
+      $.ajaxSetup({
+         data: window.csrf,
+         cache: false,
+         headers: {
+            'X-CSRF-TOKEN': '<?php echo($_SESSION['csrf_token']); ?>'
+         }
+      });
+