The verification fails if the form is encoded with multipart/form-data and there is an input with zip file

[emersoncavalcanti1972]

A CSRF failure occurs when a form (encoded with multipart/form-data) uses a file-type input in which to send a zip file. I tested with .jpg, .png and .pdf without fail. I noticed that the error is in the way the form fields are retrieved using the request->getParsedBody() function on your code. Which does not return data if the file type input contains ZIP files.