TYPO3 Core

* @return string a URL GET variable including ampersand

*/

public static function getUrlToken($formName = 'securityToken', $tokenName = 'formToken') {

return '&' . $tokenName . '=' . $formprotection->generateToken($formName);

}

public function addExtDirectCode() {

$token = '';

if (TYPO3_MODE === 'BE') {

$token = $formprotection->generateToken('extDirect');

}

* @return string a complete input field

*/

public static function getHiddenTokenField($formName = 'securityToken', $tokenName = 'formToken') {

return '<input type="hidden" name="' .$tokenName . '" value="' . $formprotection->generateToken($formName) . '" />';

}

$token = array_pop($singleRequest->data);

if ($firstCall) {

$firstCall = FALSE;

$validToken = $formprotection->validateToken($token, 'extDirect');

}

* matter; you only need it to get the form token for verifying it.

*

* <pre>

* )->generateToken(

* 'BE user setup', 'edit'

* );

* For editing a tt_content record, the call could look like this:

*

* <pre>

* )->getFormProtection()->generateToken(

* 'tt_content', 'edit', $uid

* );

* generated tokens get saved, and also that removed tokens stay removed:

*

* <pre>

* )->persistTokens();

* </pre>

*

* that the form token is valid like this:

*

* <pre>

* )->validateToken(

* (string) t3lib_div::_POST('formToken'),

* 'BE user setup', 'edit

***************************************************************/

/**

*

* This class creates and manages instances of the various form protection

* classes.

* Usage for the back-end form protection:

*

* <pre>

* 't3lib_formProtection_BackEnd'

* );

* </pre>

* Usage for the install tool form protection:

*

* <pre>

* 'tx_install_formprotection'

* );

* $formProtection->injectInstallTool($this);

* @author Oliver Klee <typo3-coding@oliverklee.de>

* @author Ernesto Baschny <ernst@cron-it.de>

*/

/**

* created instances of form protections using the type as array key

*

require_once('fixtures/class.t3lib_formprotection_testing.php');

/**

*

* $Id$

*

* @author Oliver Klee <typo3-coding@oliverklee.de>

* @author Ernesto Baschny <ernst@cron-it.de>

*/

public function setUp() {

}

public function tearDown() {

}

* @expectedException InvalidArgumentException

*/

public function getForInexistentClassThrowsException() {

}

/**

* @expectedException InvalidArgumentException

*/

public function getForClassThatIsNoFormProtectionSubclassThrowsException() {

}

/**

*/

public function getForTypeBackEndWithExistingBackEndReturnsBackEndFormProtection() {

$this->assertTrue(

't3lib_formprotection_BackendFormProtection'

) instanceof t3lib_formprotection_BackendFormProtection

);

*/

public function getForTypeBackEndCalledTwoTimesReturnsTheSameInstance() {

$this->assertSame(

't3lib_formprotection_BackendFormProtection'

),

't3lib_formprotection_BackendFormProtection'

)

);

*/

public function getForTypeInstallToolReturnsInstallToolFormProtection() {

$this->assertTrue(

't3lib_formprotection_InstallToolFormProtection'

) instanceof t3lib_formprotection_InstallToolFormProtection

);

*/

public function getForTypeInstallToolCalledTwoTimesReturnsTheSameInstance() {

$this->assertSame(

't3lib_formprotection_InstallToolFormProtection'

),

't3lib_formprotection_InstallToolFormProtection'

)

);

*/

public function getForTypesInstallToolAndBackEndReturnsDifferentInstances() {

$this->assertNotSame(

't3lib_formprotection_InstallToolFormProtection'

),

't3lib_formprotection_BackendFormProtection'

)

);

*/

public function setSetsInstanceForType() {

$instance = new t3lib_formProtection_Testing();

't3lib_formprotection_BackendFormProtection', $instance

);

$this->assertSame(

$instance,

't3lib_formprotection_BackendFormProtection'

)

);

*/

public function setNotSetsInstanceForOtherType() {

$instance = new t3lib_formProtection_Testing();

't3lib_formprotection_BackendFormProtection', $instance

);

$this->assertNotSame(

$instance,

't3lib_formprotection_InstallToolFormProtection'

)

);

// Preprocessing, storing data if submitted to

$SOBE->preInit();

if ($SOBE->doProcessData()) { // Checks, if a save button has been clicked (or the doSave variable is sent)

if ($formprotection->validateToken(t3lib_div::_GP('formToken'), 'editRecord')) {

*/

public function login(array $parameters, TYPO3AJAX $ajaxObj) {

if ($GLOBALS['BE_USER']->user['uid']) {

$token = $formprotection->generateToken('extDirect');

$json = array(

}

}

}

/**

if (!$this->loginRefresh) {

t3lib_utility_Http::redirect($this->redirectToURL);

} else {

$token = $formprotection->generateToken('extDirect');

$TBE_TEMPLATE->JScode.=$TBE_TEMPLATE->wrapScriptTags('

if (parent.opener && (parent.opener.busy || parent.opener.TYPO3.loginRefresh)) {

// Include files?

foreach($SOBE->include_once as $INC_FILE) include_once($INC_FILE);

if ($formprotection->validateToken(t3lib_div::_GP('formToken'), 'tceAction')) {

$SOBE->initClipboard();

<!-- Wrapping DIV-section for whole page END -->

</div>':'') . $this->endOfPageJsBlock ;

}