Check if CSRF is same and exists

<?php

$token = $_POST['token'];

if ($token !== $_SESSION['token']) {
    //Here goes a message or something else
    return false; //or return whatever is appropriate
}