1. sfValidatorCSRFToken.class.php
  2. /**
 * sfValidatorCSRFToken checks that the token is valid.
 *
 * @package    symfony
 * @subpackage validator
 * @author     Fabien Potencier 
 * @version    SVN: $Id: sfValidatorCSRFToken.class.php 7902 2008-03-15 13:17:33Z fabien $
 */
  3. class sfValidatorCSRFToken extends sfValidatorBase
  4. {
  5.   /**
  6.    * @see sfValidatorBase
  7.    */
  8.   protected function configure($options = array(), $messages = array())
  9.   {
  10.     $this->addRequiredOption('token');
  12.     $this->setOption('required', true);
  14.     $this->addMessage('csrf_attack', 'CSRF attack detected.');
  15.   }
  17.   /**
  18.    * @see sfValidatorBase
  19.    */
  20.   protected function doClean($value)
  21.   {
  22.     if ($value != $this->getOption('token'))
  23.     {
  24.       throw new sfValidatorError($this, 'csrf_attack');
  25.     }
  27.     return $value;
  28.   }
  29. }
Debug toolbar