Changeset 16012 for extensions/GrumPluginClasses/classes/GPCAjax.class.inc.php

Timestamp:

Jun 24, 2012, 9:18:26 PM (12 years ago)

Author:

grum

Message:

feature:2634- compatibility with Piwigo 2.4
+add some objects on js framework

File:

• extensions/GrumPluginClasses/classes/GPCAjax.class.inc.php (modified) (4 diffs)

extensions/GrumPluginClasses/classes/GPCAjax.class.inc.php

@@ -3 +3 @@
 /* -----------------------------------------------------------------------------
   class name     : GPCAjax
-  class version  : 3.0.0
-  plugin version : 3.0.0
-  date           : 2010-03-30
+  class version  : 3.1.0
+  plugin version : 3.5.2
+  date           : 2012-06-19
   ------------------------------------------------------------------------------
   author: grum at piwigo.org
@@ -15 +15 @@
 | release | date       |
 | 3.0.0   | 2010/03/30 | * Update class & function names
+|         |            |
+| 3.1.0   | 2012/06/19 | * Check token request
+|         |            |
 |         |            |
 |         |            |
@@ -27 +30 @@
    ---------------------------------------------------------------------- */
 
-
+define('GPC_AJAX', 'ajaxfct');
 
 class GPCAjax
@@ -39 +42 @@
     exit(strtr($str, $chars));
   }
+
+  /**
+   * check if there's a valid token in $_REQUEST
+   * if no, the GPC_AJAX call is set to empty value
+   *
+   * @param String $fct: the ajax function field (GPC_AJAX by default)
+   * @param String $token: the token field ('token' by default) to check
+   * @return Boolean: true if ok, otherwise false
+   */
+  static public function checkToken($fct=GPC_AJAX, $token='token')
+  {
+    if(!isset($_REQUEST[$token])) $_REQUEST[$token]='';
+    if($fct!='' && !isset($_REQUEST[$fct])) $_REQUEST[$fct]='';
+
+    if($_REQUEST[$token]==get_pwg_token()) return(true);
+
+    if($fct!='') $_REQUEST[$fct]='';
+    return(false);
+  }
 } //class