Same name and namespace in other branches
  1. 4.6.x includes/common.inc \drupal_valid_token()
  2. 4.7.x includes/common.inc \drupal_valid_token()
  3. 5.x includes/common.inc \drupal_valid_token()
  4. 6.x includes/common.inc \drupal_valid_token()

Validates a token based on $value, the user session, and the private key.

Parameters

$token: The token to be validated.

$value: An additional value to base the token on.

$skip_anonymous: Set to true to skip token validation for anonymous users.

Return value

True for a valid token, false for an invalid token. When $skip_anonymous is true, the return value will always be true for anonymous users.

12 calls to drupal_valid_token()
ajax_base_page_theme in includes/ajax.inc
Theme callback for Ajax requests.
color_palette_color_value in modules/color/color.module
Determines the value for a palette color field.
drupal_validate_form in includes/form.inc
Validates user-submitted form data in the $form_state array.
form_builder in includes/form.inc
Builds and processes all elements in the structured form array.
form_get_cache in includes/form.inc
Fetches a form from cache.

... See full list

File

includes/common.inc, line 5376
Common functions that many Drupal modules will need to reference.

Code

function drupal_valid_token($token, $value = '', $skip_anonymous = FALSE) {
  global $user;
  return $skip_anonymous && $user->uid == 0 || $token === drupal_get_token($value);
}