I have a page that is open (i.e. requires no login) and allows users to give quick feedback. This page is available on a single shared PC or tablet. The form itself has a CSRF token on it.
Problem is that the time between people submitting responses could be longer than the PHP session time. Solutions seem to be:
- using a meta refresh to reload the page every 15 mins (could refresh while someone was giving feedback, so not great)
- remove the CSRF token protection (so reducing the security)
Is there another way of dealing with this?