Same name and namespace in other branches
- 4.6.x includes/common.inc \drupal_valid_token()
- 4.7.x includes/common.inc \drupal_valid_token()
- 6.x includes/common.inc \drupal_valid_token()
- 7.x includes/common.inc \drupal_valid_token()
Validate a token based on $value, the current user session and private key.
Parameters
$token: The token to be validated.
$value: An additional value to base the token on.
$skip_anonymous: Set to true to skip token validation for anonymous users.
Return value
True for a valid token, false for an invalid token. When $skip_anonymous is true, the return value will always be true for anonymous users.
Related topics
File
- includes/
common.inc, line 1949 - Common functions that many Drupal modules will need to reference.
Code
function drupal_valid_token($token, $value = '', $skip_anonymous = FALSE) {
global $user;
return $skip_anonymous && $user->uid == 0 || $token == md5(session_id() . $value . variable_get('drupal_private_key', ''));
}