PHP verifyFormToken函数代码示例

OGeek|极客世界-中国程序员成长平台 › 门户 › 编程› PHP›PHP编程经验

原作者: [db:作者] 来自: [db:来源] 收藏邀请

本文整理汇总了PHP中verifyFormToken函数的典型用法代码示例。如果您正苦于以下问题：PHP verifyFormToken函数的具体用法？PHP verifyFormToken怎么用？PHP verifyFormToken使用的例子？那么恭喜您, 这里精选的函数代码示例或许可以为您提供帮助。

在下文中一共展示了verifyFormToken函数的16个代码示例，这些例子默认根据受欢迎程度排序。您可以为喜欢或者感觉有用的代码点赞，您的评价将有助于我们的系统推荐出更棒的PHP代码示例。

示例1: check_input

    }
    // compare the tokens against each other if they are still the same
    if ($_SESSION[$form . '_token'] !== $_POST['token']) {
        return false;
    }
    return true;
}
function check_input($data)
{
    $data = trim($data);
    $data = stripslashes($data);
    $data = htmlspecialchars($data);
    return $data;
}
if (isset($_POST['submit'])) {
    if (verifyFormToken('form1')) {
        $name = check_input($_POST["name"]);
        $email = check_input($_POST["emailaddress"]);
        $message = check_input($_POST["message"]);
        $ForwardTo = '[email protected]';
        $details = 'Name: ' . $name . "\n" . 'Email: ' . $email . "\n" . 'Message: ' . $message . "\n";
        $data['success'] = true;
        $data['message'] = 'Success!';
        mail($ForwardTo, "Construction of Hope Contact", $details, "From:{$email}");
    } else {
        $data['success'] = false;
        $data['errors'] = $errors;
    }
    exit('
      <body>

开发者ID:Nathan-Bateman，项目名称:coh，代码行数:30，代码来源:emunah.php

示例2: array

<?php

if ($_POST['recipient'] != "") {
    // VERIFY LEGITIMACY OF TOKEN
    if (verifyFormToken('cwfile')) {
        // CHECK TO SEE IF THIS IS A MAIL POST
        if (isset($_POST['active'])) {
            // Building a whitelist array with keys which will send through the form, no others would be accepted later on
            $whitelist = array('token', 'term', 'recipient', 'name', 'protect', 'active', 'password', 'content', 'duration', 'specificdate', 'gallery[]', 'redirect', 'imgtype', 'userid', 'img', 'imgsizes', 'id', 'CwFileCode', 'encryptid', 'cwfilecode');
            // Building an array with the $_POST-superglobal
            foreach ($_POST as $key => $item) {
                // Check if the value $key (fieldname from $_POST) can be found in the whitelisting array, if not, die with a short message to the hacker
                if (!in_array($key, $whitelist)) {
                    writeLog('Unknown form fields');
                    die("Hack-Attempt detected. Please use only the fields in the form");
                }
            }
            // Lets check the URL whether it's a real URL or not. if not, stop the script
            #            if(!filter_var($_POST['active'],FILTER_VALIDATE_URL)) {
            #            			writeLog('URL Validation');
            #            		die('Hack-Attempt detected. Please insert a valid URL');
            #            }
            // SAVE INFO AS COOKIE, if user wants name and email saved
            $saveCheck = $_POST['save-stuff'];
            if ($saveCheck == 'on') {
                setcookie("WRCF-Name", $_POST['recipient'], time() + 60 * 60 * 24 * 365);
                setcookie("WRCF-Email", $_POST['recipient'], time() + 60 * 60 * 24 * 365);
            }
            $Sender = "Pk Design";
            $Expire = date("M-d-Y", $CwFileExpire);
            $CwLink = $CwLink . "?request={$CwFileCode}";

开发者ID:jramsey08，项目名称:Coldwebs-V2.0，代码行数:31，代码来源:mail.php

示例3: set_error

<?php

$auth_name = 'ban';
$b3_conn = true;
// this page needs to connect to the B3 database
require '../../inc.php';
if (!$_POST['ban-sub']) {
    // if the form not is submitted
    set_error('Please do not call that page directly, thank you.');
    send('../../index.php');
}
## check that the sent form token is corret
if (!verifyFormToken('ban', $tokens)) {
    // verify token
    ifTokenBad('Add ban');
}
## Type of ban and get and set vars ##
$pb_ban = cleanvar($_POST['pb']);
if ($pb_ban == 'on') {
    $is_pb_ban = true;
} else {
    $is_pb_ban = false;
    $duration_form = cleanvar($_POST['duration']);
    $time = cleanvar($_POST['time']);
    emptyInput($time, 'time frame');
    emptyInput($duration_form, 'penalty duration');
}
$reason = cleanvar($_POST['reason']);
$client_id = cleanvar($_POST['cid']);
$pbid = cleanvar($_POST['c-pbid']);
$c_name = cleanvar($_POST['c-name']);

开发者ID:Hunterm267，项目名称:Web-Echelon，代码行数:31，代码来源:ban.php

示例4: elseif

    $is_add = true;
} elseif ($_POST['type'] == 'edit') {
    $is_add = false;
} else {
    sendBack('Missing Data');
}
## Check Token ##
if ($is_add) {
    // if add server request
    if (verifyFormToken('addserver', $tokens) == false) {
        // verify token
        ifTokenBad('Add Server');
    }
} else {
    // if edit server settings
    if (verifyFormToken('editserversettings', $tokens) == false) {
        // verify token
        ifTokenBad('Server Settings Edit');
    }
}
## Get Vars ##
$name = cleanvar($_POST['name']);
$ip = cleanvar($_POST['ip']);
$pb = cleanvar($_POST['pb']);
// DB Vars
$rcon_ip = cleanvar($_POST['rcon-ip']);
$rcon_port = cleanvar($_POST['rcon-port']);
$rcon_pw_cng = cleanvar($_POST['cng-pw']);
$rcon_pw = cleanvar($_POST['rcon-pass']);
$server_id = cleanvar($_POST['server']);
if ($is_add) {

开发者ID:Gammelbob，项目名称:echelon，代码行数:31，代码来源:settings-server.php

示例5: send

    send('../index.php');
}
## Find Type ##
if ($_POST['type'] == 'add') {
    $is_add = true;
} elseif ($_POST['type'] == 'edit') {
    $is_add = false;
} else {
    sendBack('Missing Data');
}
## Check Token ##
if ($is_add) {
    //if(!verifyFormToken('addgame', $tokens)) // verify token
    //ifTokenBad('Add Game');
} else {
    if (!verifyFormToken('gamesettings', $tokens)) {
        // verify token
        ifTokenBad('Game Settings Edit');
    }
}
## Get Vars ##
$name = cleanvar($_POST['name']);
$name_short = cleanvar($_POST['name-short']);
if ($is_add) {
    $game_type = cleanvar($_POST['game-type']);
}
// DB Vars
$db_host = cleanvar($_POST['db-host']);
$db_user = cleanvar($_POST['db-user']);
$db_pw_cng = cleanvar($_POST['cng-pw']);
$db_pw = cleanvar($_POST['db-pw']);

开发者ID:Gammelbob，项目名称:echelon，代码行数:31，代码来源:settings-game.php

示例6: cleanvar

<?php

$auth_name = 'add_user';
// this page is add user, so that if you can add keys you should be able to remove them
require '../inc.php';
if ($_POST['t'] == 'del') {
    // if this is a deletion request
    $key = cleanvar($_POST['key']);
    if (verifyFormToken('keydel' . $key, $tokens) == false) {
        // verify token
        ifTokenBad('Reg Key Delete');
    }
    // if bad token, log and send error
    $result = $dbl->delKey($key);
    if ($result) {
        sendGood('Registration key deleted');
    } else {
        sendBack('There was an problem completeing your request');
    }
    exit;
    // no need continuing with this script
} elseif ($_POST['comment']) {
    // if this is an edit comment request
    $key = cleanvar($_POST['key']);
    $comment = cleanvar($_POST['comment']);
    emptyInput($comment, 'comment');
    $result = $dbl->editKeyComment($key, $comment, $mem->id);
    // this is an ajax request, so we need to echo error/success messages
    if ($result) {
        echo 'yes';
    } else {

开发者ID:Gammelbob，项目名称:echelon，代码行数:31，代码来源:key-edit.php

示例7: elseif

} elseif ($_POST['react']) {
    // if this is a re-activation request
    $bl_id = $_POST['id'];
    if (!verifyFormToken('act' . $bl_id, $tokens)) {
        // verify token
        ifTokenBad('BL De-activate');
    }
    // if bad log and send error
    $dbl->BLactive($bl_id, true);
    // run query to reactivate BL ban
    sendGood('This blacklist ban has been re-activiated');
    exit;
    // no need to continue
} elseif ($_POST['ip']) {
    // if this is an add request
    if (!verifyFormToken('addbl', $tokens)) {
        // verify token
        ifTokenBad('BL Add');
    }
    // if bad log, add hack counter and throw error
    // set and clean vars
    $reason = cleanvar($_POST['reason']);
    $ip = cleanvar($_POST['ip']);
    // check for empty inputs
    emptyInput($reason, 'the reason');
    emptyInput($ip, 'IP Address');
    // if reason is default comment msg, send back with error
    if ($reason == "Enter a reason for this ban...") {
        sendBack('You must add a reason as to why this IP ban is being added');
    }
    // check if it is a valid IP address

开发者ID:Hunterm267，项目名称:Web-Echelon，代码行数:31，代码来源:blacklist.php

示例8: sendBack

<?php

$auth_name = 'add_user';
require '../inc.php';
## if form is submitted ##
if (!isset($_POST['add-user'])) {
    // if this was not a post request then send back with error
    sendBack('Please do not access that page directly');
}
## check that the sent form token is corret
if (!verifyFormToken('adduser', $tokens)) {
    // verify token
    ifTokenBad('Add User');
}
// set email and comment and clean
$email = cleanvar($_POST['email']);
$comment = cleanvar($_POST['comment']);
$group = cleanvar($_POST['group']);
// check the new email address is a valid email address
if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
    sendBack('That email is not valid');
}
// Create a unique key for the user
$text = $admin_id . $email . uniqid(microtime(), true) . $group;
// take sent data and some random data to create a random string
$rand_text = str_shuffle($text);
// shuffle the string to make more random
$user_key = genHash($rand_text);
// hash the random string to get the user hash
## run query to add key to the DB ##
$add_user = $dbl->addEchKey($user_key, $email, $comment, $group, $mem->id);

开发者ID:Hunterm267，项目名称:Web-Echelon，代码行数:31，代码来源:user-add.php

示例9: ifTokenBad

<?php

$auth_name = 'greeting';
$b3_conn = true;
// this page needs to connect to the B3 database
require '../../inc.php';
if ($_POST['greeting-sub']) {
    // if the form is submitted
    ## check that the sent form token is corret
    if (verifyFormToken('greeting', $tokens) == false) {
        // verify token
        ifTokenBad('Add comment');
    }
    $greeting = cleanvar($_POST['greeting']);
    $client_id = cleanvar($_POST['cid']);
    // NOTE: allow for an empty comment. An empty comment means no comment
    emptyInput($client_id, 'data not sent');
    if (!isID($client_id)) {
        sendBack('Invalid data sent, greeting not changed');
    }
    ## Add Log Message ##
    $comment = 'Greeting message changed';
    $dbl->addEchLog('Greeting', $comment, $client_id, $mem->id);
    ## Query ##
    $query = "UPDATE clients SET greeting = ? WHERE id = ? LIMIT 1";
    $stmt = $db->mysql->prepare($query) or sendBack('Database Error');
    $stmt->bind_param('si', $greeting, $client_id);
    $stmt->execute();
    if ($stmt->affected_rows) {
        sendGood('Greeting has been updated');
    } else {

开发者ID:Gammelbob，项目名称:echelon，代码行数:31，代码来源:greeting.php

示例10: set_error

<?php

$auth_name = 'edit_ban';
$b3_conn = true;
// this page needs to connect to the B3 database
require '../../inc.php';
if (!$_POST['eb-sub']) {
    // if the form not is submitted
    set_error('Please do not call that page directly, thank you.');
    send('../../index.php');
}
## check that the sent form token is corret
if (verifyFormToken('editban', $tokens) == false) {
    // verify token
    ifTokenBad('Edit ban');
}
$ban_id = cleanvar($_POST['banid']);
$pbid = cleanvar($_POST['pbid']);
$pb_ban = cleanvar($_POST['pb']);
$reason = cleanvar($_POST['reason']);
$cid = cleanvar($_POST['cid']);
if ($pb_ban == 'on') {
    $is_pb_ban = true;
    $type = 'Ban';
    $duration = 0;
    $time_expire = '-1';
} else {
    $is_pb_ban = false;
    $type = 'TempBan';
    $duration_form = cleanvar($_POST['duration']);
    $time = cleanvar($_POST['time']);

开发者ID:Hunterm267，项目名称:Web-Echelon，代码行数:31，代码来源:editban.php

示例11: set_error

$auth_name = 'unban';
$b3_conn = true;
// this page needs to connect to the B3 database
require '../../inc.php';
## Check the form was submitted ##
if (!$_POST['unban-sub']) {
    // if the form not is submitted
    set_error('Please do not call that page directly, thank you.');
    send('../../index.php');
}
## get vars ##
$ban_id = $_POST['banid'];
$type = cleanvar($_POST['type']);
## check that the sent form token is correct ##
if (verifyFormToken('unban' . $ban_id, $tokens) == false) {
    // verify token
    ifTokenBad('Unban');
}
## Check for empties ##
emptyInput($type, 'data not sent');
emptyInput($ban_id, 'data not sent');
## Check ban_id is a number ##
if (!isID($ban_id)) {
    sendBack('Invalid data sent, ban not added');
}
## Send query ##
$results = $db->makePenInactive($ban_id);
if (!$results) {
    // if bad send back warning
    sendBack('Penalty has not been removed');

开发者ID:Gammelbob，项目名称:echelon，代码行数:30，代码来源:unban.php

示例12: set_error

<?php

$auth_name = 'comment';
$b3_conn = true;
// this page needs to connect to the B3 database
require '../../inc.php';
if (!isset($_POST['comment-sub'])) {
    // if the form is submitted
    set_error('Please do not call that page directly');
    send('../../');
}
## check that the sent form token is corret
if (verifyFormToken('comment', $tokens) == false) {
    // verify token
    ifTokenBad('Add comment');
}
// Gets vars from form
$cid = cleanvar($_POST['cid']);
$comment = cleanvar($_POST['comment']);
// Check for empties
emptyInput($comment, 'comment');
emptyInput($cid, 'client id not sent');
## Check sent client_id is a number ##
if (!isID($cid)) {
    sendBack('Invalid data sent, ban not added');
}
## Query ##
$result = $dbl->addEchLog('Comment', $comment, $cid, $mem->id, $game);
if ($result) {
    sendGood('Comment added');
} else {

开发者ID:Gammelbob，项目名称:echelon，代码行数:31，代码来源:comment.php

示例13: set_error

<?php

$auth_name = 'edit_xlrstats';
$b3_conn = true;
// this page needs to connect to the B3 database
require '../../../inc.php';
if (!isset($_POST['xlrstats-sub'])) {
    // if the form is submitted
    set_error('Please do not call this page directly');
    send('../../');
}
## check that the sent form token is corret
if (verifyFormToken('xlrstats', $tokens) == false) {
    // verify token
    ifTokenBad('XLRstats Edit');
}
// Gets vars from form
$cid = cleanvar($_POST['cid']);
$name = cleanvar($_POST['fixed-name']);
$hide = cleanvar($_POST['hidden']);
if ($hide == 'on') {
    $hide = 1;
} else {
    $hide = 0;
}
// NOTE: when the user supplies an empty fixed name, the db will be updated with a blank/NULL field, in effect disabling the feature
## Check sent client_id is a number ##
if (!isID($cid)) {
    sendBack('Invalid data sent, ban not added');
}
## LOG Query ##

开发者ID:Hunterm267，项目名称:Web-Echelon，代码行数:31，代码来源:actions.php

示例14: ifTokenBad

    // check which auth level is needed
    $auth_name = 'edit_client_level';
} else {
    $auth_name = 'edit_mask';
}
$b3_conn = true;
// this page needs to connect to the B3 database
require '../../inc.php';
## check that the sent form token is corret
if (!$is_mask) {
    if (verifyFormToken('level', $tokens) == false) {
        // verify token
        ifTokenBad('Change client level');
    }
} else {
    if (verifyFormToken('mask', $tokens) == false) {
        // verify token
        ifTokenBad('Change client mask level');
    }
}
## Set and clean vars ##
$level = cleanvar($_POST['level']);
$client_id = cleanvar($_POST['cid']);
$old_level = cleanvar($_POST['old-level']);
$password = cleanvar($_POST['password']);
## Check Empties ##
emptyInput($level, 'data not sent');
emptyInput($client_id, 'data not sent');
emptyInput($old_level, 'data not sent');
if (!$is_mask) {
    // only the client level needs a password

开发者ID:Gammelbob，项目名称:echelon，代码行数:31，代码来源:level.php

示例15: substr

    }
    $perms = substr($list, 0, -1);
    // remove the final comma
    ## get slug from name ##
    $name = strtolower(trim($name));
    $slug = preg_replace('/[^a-z0-9-]/', '', $name);
    $result = $dbl->addGroup($name, $slug, $perms);
    if (!$result) {
        sendBack('There was a problem creating the new group');
    } else {
        sendGood('The group ' . $name . ' has been created!');
    }
} else {
    // edit group perms
    # verify token #
    if (!verifyFormToken('perm-group-edit', $tokens)) {
        ifTokenBad('Edit Group Permissions');
    }
    $group_id = cleanvar($_GET['gid']);
    // get the group to update from the URL
    ## check numeric id ##
    if (!is_numeric($group_id)) {
        sendBack('Invalid data sent, request aborted');
    }
    $data = getPostsPerms($_POST);
    $perms_list = $dbl->getPermissions(false);
    // get a full list of all perms (without desc)
    foreach ($perms_list as $perm) {
        // compare the two lists and create a common list of perms
        $perm_id = $perm['id'];
        $perm_name = $perm['name'];

开发者ID:Hunterm267，项目名称:Web-Echelon，代码行数:31，代码来源:perms-edit.php

示例16: sendBack

    } else {
        sendBack('There is a problem. The user has not been deleted');
    }
    exit;
} elseif ($_POST['ad-edit-user']) {
    // admin edit user
    ## get and clean vars ##
    $username = cleanvar($_POST['username']);
    $display = cleanvar($_POST['display']);
    $email = cleanvar($_POST['email']);
    $group = cleanvar($_POST['group']);
    $id = cleanvar($_POST['id']);
    ## check numeric id ##
    if (!is_numeric($id)) {
        sendBack('Invalid data sent, request aborted');
    }
    # verify token #
    if (!verifyFormToken('adedituser', $tokens)) {
        ifTokenBad('Edit Echelon User');
    }
    $result = $dbl->editUser($id, $username, $display, $email, $group);
    if ($result) {
        sendGood($display . "'s information has been updated");
    } else {
        sendBack('There is a problem. The user information has not been changed');
    }
    exit;
} else {
    set_error('You cannot view this page directly');
    send('sa.php');
}

开发者ID:Hunterm267，项目名称:Web-Echelon，代码行数:31，代码来源:user-edit.php

注：本文中的verifyFormToken函数示例整理自Github/MSDocs等源码及文档管理平台，相关代码片段筛选自各路编程大神贡献的开源项目，源码版权归原作者所有，传播和使用请参考对应项目的License；未经允许，请勿转载。

鲜花

握手

雷人

路过

鸡蛋

该文章已有0人参与评论

请发表评论

全部评论

专题导读

More+

10-27 六六分期app的软件客服如何联系？(六六分期

11-06 可心卡盟:win10系统火狐flash插件崩溃怎么

11-06 亲亲特价:怎么删除回收站图标

11-06 济南大学虚拟社区:鲁大师节能降温的具体办

11-06 xlueops.exe:无线网络安装向导

11-06 女斗合众国:win7系统cf与主机连接不稳定怎

11-06 0xc000022-[cf烟雾头]cf怎么调烟雾头

11-06 qizideyouhuo:应用程序无法正常启动0xc0000

11-06 ipz-185:win7系统vcf文件怎么打开

11-06 傻哥蹦迪:win10系统s4怎么打开usb调试

11-06 八神浩树gtaste:回收站清空了怎么恢复

11-06 妖尾之黑色守护:win10系统电脑没有1440x900

11-06 校园至尊魔王小说:win7系统浏览网页时字体

11-06 女斗合众国:win10系统访问共享文件夹提示请

11-06 tokyo hot n0654:恢复win7系统默认字体一招

11-06 雨酷仙境:设置win7系统转移临时文件夹腾出

11-06 阿穆纳伊之杖:win7系统开始菜单在右边还原

11-06 tunespotting:win10系统火狐flash插件总是

11-06 甘尔葛分析师：计谋网站seo关键词暴涨有什

11-06 蔡贵霖: 计谋网站seo关键词暴涨有什么秘密

11-06 博益网首页:ao3网页版进入不了解决方法

11-06 漏斗子专栏: 网站数据分析小白易懂精华篇

11-06 见证双虹怎么做:win7系统开启telnet命令的

11-06 颾狐蝶蜋:系统资源不足无法完成请求的服务

11-06 国光中学校歌:提交网站到alexa查询详细步骤

11-06 西安有情天:静态网页和动态网页的区别

11-06 红木雅尚斋:外部链接构造对网站的好处

11-06 前官礼遇：防止域名劫持–增强域安全性的10

11-06 密传二转答案: 中文分词算法有哪些

11-06 金泉家园邮编:百度快照劫持的表现及应对方

PHP verifyID函数代码示例发布时间：2022-05-23

PHP verifyEmail函数代码示例发布时间：2022-05-23

bradtraversy/iweather: Ionic 3 mobile we

1 CVE-2022-29602

The gridelements (aka Grid Elements) extension through 7.6.1, 8.x through 8.7.0,

阅读：612|2022-07-29

2 krishnaik06/Machine-Learning-in-90-days

krishnaik06/Machine-Learning-in-90-days

阅读：1058|2022-08-18

3 opendevstack/ods-jenkins-shared-library:

opendevstack/ods-jenkins-shared-library: Shared Jenkins library which all ODS pr

阅读：2248|2022-08-15

4 armancodv/building-energy-model-matlab:

armancodv/building-energy-model-matlab: It is a small software which is develope

阅读：1111|2022-08-17

5 美元符号为什么是“$”

在美元的英文“dollar”里面明明没有字母“s”，为什么美元的符号($)是一条竖线穿过字

阅读：1060|2022-11-06

6 FGRibreau/import-tweets-to-mastodon: How

FGRibreau/import-tweets-to-mastodon: How to import tweets to mastodon (e.g. http

阅读：924|2022-08-17

7 Delphi连接数据库三种方法

参考资料： 1、通过BDE 如果通过BDE，那么速度会快一些（相对ODBC），连接是需

阅读：1276|2022-07-22

8 Delphi WinAPI mouse_event- 鼠标事件函数

Delphi WinAPI mouse_event- 鼠标事件函数综合鼠标运动和按钮点击。 mouse_event 函数

阅读：641|2022-07-18

9 tboronczyk/localization-middleware: PSR-

tboronczyk/localization-middleware: PSR-15 middleware to assist primarily with l

阅读：496|2022-08-16

10 长沙科技学院怎么样?是几本

长沙城南，有一所以“环保”为名的学校，从1979年创立以来，四易归属、五更其名。这

阅读：755|2022-11-06

客服电话

电子邮件

PHP verifyFormToken函数代码示例

示例1: check_input

示例2: array

示例3: set_error

示例4: elseif

示例5: send

示例6: cleanvar

示例7: elseif

示例8: sendBack

示例9: ifTokenBad

示例10: set_error

示例11: set_error

示例12: set_error

示例13: set_error

示例14: ifTokenBad

示例15: substr

示例16: sendBack

请发表评论

全部评论

上一篇：

下一篇：

librespeed/speedtest: Self-hosted Speedt

avehtari/BDA_m_demos: Bayesian Data Anal

四维彩超怎么看性别？四维看男孩女孩诀窍

【MATLAB与机械设计】多维优化之梯度法（最

medfreeman/markdown-it-toc-and-anchor: m

bradtraversy/iweather: Ionic 3 mobile we

joaomh/curso-de-matlab

CVE-2022-34571

断牙刷新位置时间（断牙属性及刷新位置介绍

rugk/mastodon-simplified-federation: Sim

揭秘全国凤楼信息网充值骗局

关于我们

产品与服务

解决方案

139-2527-9053