#!/usr/bin/env php
CSRF Token Audit
================

Scanning view files...

Total files scanned: 956

=== CRITICAL ISSUES (11 files) ===
These files likely have CSRF token problems:

❌ settings/user_groups/show.php
   - JavaScript references csrf_token but csrf_field() not found

❌ suppliers/create.php
   - POST form without csrf_field()

❌ suppliers/edit.php
   - POST form without csrf_field()

❌ email/thread.php
   - JavaScript references csrf_token but csrf_field() not found

❌ email/index.php
   - JavaScript references csrf_token but csrf_field() not found

❌ projects/board.php
   - JavaScript references csrf_token but csrf_field() not found

❌ projects/list.php
   - JavaScript references csrf_token but csrf_field() not found

❌ projects/resources.php
   - JavaScript references csrf_token but csrf_field() not found

❌ projects/gantt.php
   - JavaScript references csrf_token but csrf_field() not found

❌ email_marketing/lists/show.php
   - JavaScript references csrf_token but csrf_field() not found

❌ components/internal_notes_modal.php
   - JavaScript references csrf_token but csrf_field() not found


=== SUMMARY ===
Files with csrf_field(): 504
Files with potential issues: 11
Files with warnings: 0
Total files checked: 956

=== TOP PRIORITY FIXES ===
1. Fix high-traffic pages (quotes, invoices, customers)
2. Fix forms that users interact with daily
3. Fix administrative pages
4. Fix utility pages (trash, etc.)

See csrf_audit_report.txt for complete list.

Detailed report saved to: csrf_audit_report.txt