PHP Token::validateToken方法代码示例

 public static function sendMsg($data)
 {
     $database = new Database();
     $token = $data['token'];
     $send_by = USER_ID;
     $send_to = $data['send_to'];
     $value = $data['value'];
     if (strlen($value) <= 0) {
         die("Message can't be empty");
     }
     if (!Token::validateToken($token)) {
         die("Token value is invalid");
     }
     $blocked = User::blocked_by_user($send_to);
     //printX($blocked); exit;
     if (in_array($send_by, $blocked)) {
         return "You can't send messages to this user";
     }
     $data = array('user_id' => $send_to, 'sender_id' => $send_by, 'subject' => $value);
     $insertion = $database->insert_data(TABLE_MESSAGES, $data);
     if ($insertion === true) {
         die(json_encode(array('status' => '1', 'msg_id' => $database->lastId)));
     } else {
         die(json_encode($database->errors));
     }
 }

 /**
  * inserts a new comment
  *
  * @param $data array
  *
  * @return int(id)|string(error)
  */
 public static function new_comment($data)
 {
     $database = new Database();
     $post = new Post();
     $PostID = $data['post_id'];
     $content = $data['content'];
     $token = $data['token'];
     if (empty(trim($content))) {
         die("Comment can't be empty");
     }
     $qna = new QNA();
     if (!is_object($qna->get_question($PostID)) && !is_array($post->get_post($PostID, true))) {
         die("Error! Post was not found.");
     }
     if (!Token::validateToken($token)) {
         die("Error! Please try again later");
     }
     unset($data['token']);
     $data['uid'] = USER_ID;
     $insert = $database->insert_data(TABLE_COMMENTS, $data);
     if ($insert === true && $database->error === false) {
         // success
         return (int) $database->lastId;
     } else {
         return array_shift($database->errors);
     }
 }

 public function __construct()
 {
     $page = 'resetpassword';
     //check for error messages
     if (isset($_SESSION['error_message'])) {
         $er_msg = $_SESSION['error_message'];
     }
     // check if a session has been started to restrict navigation to resetpassword.php while logged in
     Auth::check();
     // validate token
     if (isset($_GET['token'])) {
         session_start();
         Token::validateToken($_GET['token']);
     }
     require_once 'views/resetpassword.php';
 }

 /**
  * logs in a user
  *
  * @return boolean
  */
 public function login()
 {
     global $session;
     $this->props = $this->props['values'];
     // check token validation
     if (!Token::validateToken($this->props['auth_token'])) {
         $this->error = true;
         $this->errMsg = "Token is not valid.";
         return false;
     }
     $username = trim($this->props['username']);
     $password = trim($this->props['password']);
     if (empty($username) || empty($password)) {
         $this->error = true;
         $this->errMsg = "Username or Password can't be empty.";
         return false;
     }
     $user = self::getUserDetails($username);
     if (!$user) {
         $this->error = true;
         $this->errMsg = "Username or password is incorrect.";
         return false;
     }
     // if admin login
     if ($user->username == "admin") {
         // TODO: extra verifications for admin login
     }
     // match the user's password with the hashed one
     $pw_match = self::password_check($username, $password);
     // passwords don't match or username doesn't exist
     if (!is_object($user) || !$pw_match) {
         $this->error = true;
         $this->errMsg = "Username or password is incorrect.";
         return false;
     }
     if ($this->error) {
         return false;
     }
     // success, log the user in
     $session->login($user);
     return true;
 }

 /**
  * changes user settings (usernane, email, password)
  *
  * @param array @data user settings values
  * @param ing @user_id (default is the id stored in session)
  *
  * @return boolean
  */
 public function changeSettings($data, $user_id = USER_ID)
 {
     $database = new Database();
     if (!is_array($data)) {
         return false;
     }
     //print_r($data); exit;
     $id = $user_id;
     // check token validation
     if (!Token::validateToken($data['auth_token'])) {
         $this->error = true;
         $this->errors[] = "Token is not valid.";
         return false;
     }
     // check if old password is passed
     if (!isset($data['old_password'])) {
         $this->errors['old_password'] = "You must enter your old password.";
         $this->error = true;
         return false;
     } else {
         $pw = $data['old_password'];
     }
     // verify password
     if (!Auth::password_check($id, $pw)) {
         $this->errors['old_password'] = "Password is incorrect.";
         $this->error = true;
         return false;
     }
     // array of data to be updated
     $newData = [];
     // no need for this anymore
     unset($data['old_password']);
     $username = isset($data['username']) ? $data['username'] : false;
     $email = isset($data['email']) ? $data['email'] : false;
     $pw1 = isset($data['password']) ? $data['password'] : false;
     $pw2 = isset($data['repassword']) ? $data['repassword'] : false;
     // at least one field should be changed
     if (!$username && !$email && !$pw1) {
         $this->errors[] = "No data to be changed.";
         $this->error = true;
         return false;
     }
     // get user details by his id
     $user = Auth::getUserDetails($id);
     // if the given username is different than the one in the database
     // check if it exists in another row
     if ($username && $username !== $user->username) {
         if (!Auth::form_check("username", $username)) {
             $this->errors['username'] = "Username already exists.";
             $this->error = true;
         }
         // check unsername length
         if (strlen($username) > 15) {
             $this->error = true;
             $this->errors['username'] = "Username must be between 4 and 15 characters.";
         } elseif (strlen($username) < 4) {
             $this->error = true;
             $this->errors['username'] = "Username must be between 4 and 15 characters.";
         }
         // check username allowed characters
         if (preg_match('/[^a-z_\\-0-9]/i', $username)) {
             $this->error = true;
             $this->errors['username'] = "Username may only contain alphanumeric characters or '_'";
         }
         $newData['username'] = $username;
     }
     // the same for email
     if ($email && $email !== $user->email) {
         if (!Auth::form_check("email", $email)) {
             $this->errors['email'] = "email already exists.";
             $this->error = true;
         }
         // validate email
         if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
             $this->error = true;
             $this->errors['email'] = "email is not valid";
         }
         $newData['email'] = $email;
     }
     // username and email are passed, check for password change
     if ($pw1 && $pw2) {
         // if password 1 doesn't match password 2
         if ($pw1 !== $pw2) {
             $this->errors[] = "Passwords don't match.";
             $this->error = true;
             return false;
         }
         // check password length
         if (strlen($pw1) < 4) {
             $this->error = true;
             $this->errors['password'] = "Password must be at least 4 characters long.";
             return false;
//.........这里部分代码省略.........

     $uid = $_POST['id'];
     die(View::userCard($uid));
     break;
 case 'feed_post':
     $id = $_GET['id'];
     die(View::getFeedPost($id));
     break;
 case 'feed':
     $data = $_POST;
     unset($data['action']);
     $user_id = $data['user_id'] ?? USER_ID;
     $content = $data['content'];
     $token = $data['token'];
     $now = getNow();
     // check token validation
     if (!Token::validateToken($token)) {
         die(json_encode(['status' => false, 'err' => 'Token is not valid.']));
     }
     $database = new Database();
     $data = ['user_id' => $user_id, 'content' => $content, 'poster_id' => USER_ID, 'date' => $now];
     $insert = $database->insert_data(TABLE_ACTIVITY, $data);
     if ($insert === true) {
         $id = $database->lastId;
         die(json_encode(['status' => true, 'id' => $id]));
     }
 case 'get_post':
     $id = sanitize_id($_GET['id']);
     $post = new Post();
     $comment = $post->get_post($id);
     if (is_object($comment)) {
         die(json_encode($comment));

     if ($delete === true) {
         // delete success
         $session->logout();
         echo "1";
     } else {
         echo json_encode($user->errors);
     }
     break;
     // update user profile info
 // update user profile info
 case 'update_info':
     $database = new Database();
     $data = $_POST['values'];
     unset($_POST);
     // check token validation
     if (!Token::validateToken($data['auth_token'])) {
         die(json_encode("Token is not valid."));
     }
     unset($data['auth_token']);
     // check maximum length
     foreach ($data as $k => $v) {
         if (strlen($v) > 30) {
             die(json_encode('Input is too long.'));
         }
     }
     $fields = array_keys($data);
     $values = array_values($data);
     $update = $database->update_data("students", $fields, $values, "id", USER_ID);
     if ($update === true) {
         // delete success
         echo "1";