From 3a3b9eb8efe08f086bcbd1d88a34355e31df7650 Mon Sep 17 00:00:00 2001
From: Henry Sudhof <kellanved@phpbb.com>
Date: Thu, 21 Aug 2008 15:50:21 +0000
Subject: merge

git-svn-id: file:///svn/phpbb/trunk@8776 89ea8834-ac86-4346-8a33-228a782c2dd0
---
 phpBB/includes/functions.php | 31 +++++++++++++++++++++++++++++++
 1 file changed, 31 insertions(+)

(limited to 'phpBB/includes/functions.php')

diff --git a/phpBB/includes/functions.php b/phpBB/includes/functions.php
index 15936d2091..427c372957 100644
--- a/phpBB/includes/functions.php
+++ b/phpBB/includes/functions.php
@@ -2014,6 +2014,37 @@ function meta_refresh($time, $url)
 
 //Form validation
 
+
+/**
+* Add a secret hash   for use in links/GET requests
+* @param string  $link_name The name of the link; has to match the name used in check_form_key, otherwise no restrictions apply
+* @param int  $length The length of the key to generate
+* @return sting the hash
+
+*/
+function generate_link_hash($link_name)
+{
+	global $user;
+	if (!isset($user->data["hash_$link_name"]))
+	{
+		$user->data["hash_$link_name"] = substr(sha1($user->data['user_form_salt'] . $link_name), 0, 8);
+	}
+	return $user->data["hash_$link_name"];
+}
+
+
+/**
+* checks a link hash - for GET requests
+* @param string $token the submitted token 
+* @param string $link_name The name of the link; has to match the name used in check_form_key, otherwise no restrictions apply
+* @param int  $length The length of the key to check
+* @return boolean true if all is fine
+*/
+function check_link_hash($token, $link_name)
+{
+	return $token === generate_link_hash($link_name);
+}
+
 /**
 * Add a secret token to the form (requires the S_FORM_TOKEN template variable)
 * @param string  $form_name The name of the form; has to match the name used in check_form_key, otherwise no restrictions apply
-- 
cgit v1.2.1