<?php
    if(isset($_POST['csrf'])){
        if($_POST['csrf'] !== $_SESSION['csrf']){
            return 'session expired!';
        }
    }