aboutsummaryrefslogtreecommitdiff
path: root/views/default/input/securitytoken.php
diff options
context:
space:
mode:
authorSilvio Rhatto <rhatto@riseup.net>2014-03-15 14:46:48 -0300
committerSilvio Rhatto <rhatto@riseup.net>2014-03-15 14:46:48 -0300
commit5041c6c48153453ed597206d08eeff37cf20e676 (patch)
treeb25f495baf01202485f05b5245625f28558c6135 /views/default/input/securitytoken.php
downloadelgg-5041c6c48153453ed597206d08eeff37cf20e676.tar.gz
elgg-5041c6c48153453ed597206d08eeff37cf20e676.tar.bz2
Squashed 'mod/cool_theme/' content from commit a26f7df
git-subtree-dir: mod/cool_theme git-subtree-split: a26f7df43a266f7d1ff04847da330d15f6041e9b
Diffstat (limited to 'views/default/input/securitytoken.php')
-rw-r--r--views/default/input/securitytoken.php15
1 files changed, 15 insertions, 0 deletions
diff --git a/views/default/input/securitytoken.php b/views/default/input/securitytoken.php
new file mode 100644
index 000000000..75410848a
--- /dev/null
+++ b/views/default/input/securitytoken.php
@@ -0,0 +1,15 @@
+<?php
+/**
+ * CSRF security token view for use with secure forms.
+ *
+ * It is still recommended that you use input/form.
+ *
+ * @package Elgg
+ * @subpackage Core
+ */
+
+$ts = time();
+$token = generate_action_token($ts);
+
+echo elgg_view('input/hidden', array('name' => '__elgg_token', 'value' => $token));
+echo elgg_view('input/hidden', array('name' => '__elgg_ts', 'value' => $ts));