[ Index ]

PHP Cross Reference of MantisBT

title

Body

[close]

/core/ -> form_api.php (summary)

Form API Handles form security and validation. Security methods are targeted to work with both GET and POST form types and should allow multiple simultaneous edits of the form to be submitted out-of-order.

Copyright: Copyright (C) 2000 - 2002 Kenzaburo Ito - kenito@300baud.org
Copyright: Copyright (C) 2002 - 2011 MantisBT Team - mantisbt-dev@lists.sourceforge.net
File Size: 207 lines (6 kb)
Included or required:0 times
Referenced: 0 times
Includes or requires: 0 files

Defines 5 functions

  form_security_token()
  form_security_field()
  form_security_param()
  form_security_validate()
  form_security_purge()

Functions
Functions that are not part of a class:

form_security_token( $p_form_name )   X-Ref
Generate a random security token, prefixed by date, store it in the
user's session, and then return the string to be used as a form element
element with the security token as the value.

param: string Form name
return: string Security token string

form_security_field( $p_form_name )   X-Ref
Get a hidden form element containing a generated form security token.

param: string Form name
return: string Hidden form element to output

form_security_param( $p_form_name )   X-Ref
Get a URL parameter containing a generated form security token.

param: string Form name
return: string Hidden form element to output

form_security_validate( $p_form_name )   X-Ref
Validate the security token for the given form name based on tokens
stored in the user's session.  While checking stored tokens, any that
are more than 3 days old will be purged.

param: string Form name
return: boolean Form is valid

form_security_purge( $p_form_name )   X-Ref
Purge form security tokens that are older than 3 days, or used
for form validation.

param: string Form name



Generated: Thu Jul 28 15:48:31 2011 Cross-referenced by PHPXref 0.7