Thema: josSpoofCheck - In Version 1.5.x

In Datei plugins/system/legacy/functions.php ist diese Kod.

Code:

	// Lets make sure they saw the html form
	$check = true;
	$hash	= JUtility::getToken();
	$valid	= JRequest::getBool( $hash, 0, 'post' );
	if (!$valid) {
		$check = false;
	}

	// Make sure request came from a client with a user agent string.
	if (!isset( $_SERVER['HTTP_USER_AGENT'] )) {
		$check = false;
	}

	// Check to make sure that the request was posted as well.
	$requestMethod = JArrayHelper::getValue( $_SERVER, 'REQUEST_METHOD' );
	if ($requestMethod != 'POST') {
		$check = false;
	}

	if (!$check)
	{
		header( 'HTTP/1.0 403 Forbidden' );
		jexit( JText::_('E_SESSION_TIMEOUT') );
	}

Benutze ich aber keine Legacy-Mode.
Soll ich alles dieses Kod schreiben, oder existiert bessere Loesung.

Code:

JRequest::checkToken();