function drupal_valid_token in Drupal 5

Same name and namespace in other branches

1. 4 includes/common.inc \drupal_valid_token()
2. 6 includes/common.inc \drupal_valid_token()
3. 7 includes/common.inc \drupal_valid_token()

Validate a token based on $value, the current user session and private key.

Parameters

$token: The token to be validated.

$value: An additional value to base the token on.

$skip_anonymous: Set to true to skip token validation for anonymous users.

Return value

True for a valid token, false for an invalid token. When $skip_anonymous is true, the return value will always be true for anonymous users.

Related topics

1 call to drupal_valid_token()

drupal_validate_form in includes/form.inc

Validates user-submitted form data from a global variable using the validate functions defined in a structured form array.

File

includes/common.inc, line 1949

Common functions that many Drupal modules will need to reference.

Code

function drupal_valid_token($token, $value = '', $skip_anonymous = FALSE) {
  global $user;
  return $skip_anonymous && $user->uid == 0 || $token == md5(session_id() . $value . variable_get('drupal_private_key', ''));
}