[ Index ]
 

Code source de XOOPS 2.0.17.1

Accédez au Source d'autres logiciels libres

title

Body

[fermer]

/htdocs/class/ -> xoopssecurity.php (sommaire)

(pas de description)

Poids: 256 lignes (10 kb)
Inclus ou requis:0 fois
Référencé: 0 fois
Nécessite: 0 fichiers

Définit 1 class

XoopsSecurity:: (13 méthodes):
  XoopsSecurity()
  check()
  createToken()
  validateToken()
  clearTokens()
  filterToken()
  garbageCollection()
  checkReferer()
  checkSuperglobals()
  checkBadips()
  getTokenHTML()
  setErrors()
  getErrors()


Classe: XoopsSecurity  - X-Ref

XoopsSecurity()   X-Ref
Constructor


check($clearIfValid = true, $token = false)   X-Ref
Check if there is a valid token in $_REQUEST['XOOPS_TOKEN_REQUEST'] - can be expanded for more wide use, later (Mith)

param: bool   $clearIfValid whether to clear the token after validation
param: string $token token to validate
return: bool

createToken($timeout = 0)   X-Ref
Create a token in the user's session

param: int $timeout time in seconds the token should be valid
return: string token value

validateToken($token = false, $clearIfValid = true)   X-Ref
Check if a token is valid. If no token is specified, $_REQUEST['XOOPS_TOKEN_REQUEST'] is checked

param: string $token token to validate
param: bool   $clearIfValid whether to clear the token value if valid
return: bool

clearTokens()   X-Ref
Clear all token values from user's session


filterToken($token)   X-Ref
Check whether a token value is expired or not

param: string $token
return: bool

garbageCollection()   X-Ref
Perform garbage collection, clearing expired tokens

return: void

checkReferer($docheck=1)   X-Ref
Check the user agent's HTTP REFERER against XOOPS_URL

param: int $docheck 0 to not check the referer (used with XML-RPC), 1 to actively check it
return: bool

checkSuperglobals()   X-Ref
Check superglobals for contamination

return: void

checkBadips()   X-Ref
Check if visitor's IP address is banned
Should be changed to return bool and let the action be up to the calling script

return: void

getTokenHTML()   X-Ref
Get the HTML code for a XoopsFormHiddenToken object - used in forms that do not use XoopsForm elements

return: string

setErrors($error)   X-Ref
Add an error

param: string  $error

getErrors($ashtml = false)   X-Ref
Get generated errors

param: bool    $ashtml Format using HTML?
return: array|string    Array of array messages OR HTML string



Généré le : Sun Nov 25 11:44:32 2007 par Balluche grâce à PHPXref 0.7
  Clicky Web Analytics