PHP Form::compareToken Examples

Example #1

File: install.php Project: edubort/openclinic-1

 */
$tab = "install";
$nav = "create";
// Instead of include environment.php (because maybe database connection doesn't exists)
define("OPEN_THEME_NAME", "OpenClinic");
define("OPEN_THEME_CSS_FILE", "openclinic.css");
require_once "../config/i18n.php";
require_once "../config/session_info.php";
require_once "../lib/FlashMsg.php";
$title = _("Database Creation");
require_once "../layout/header.php";
require_once dirname(__FILE__) . "/parse_sql_file.php";
require_once "../model/Query/Setting.php";
require_once "../lib/Form.php";
if (isset($_GET["confirm"]) && $_GET["confirm"] == "yes") {
    Form::compareToken('./index.php');
}
echo HTML::section(1, $title);
/**
 * Testing connection and current version
 */
$setQ = new Query_Setting();
echo Msg::info(_("Database connection is good."));
/**
 * Show warning message if database exists
 */
$setQ->captureError(true);
$setQ->select();
if ($setQ->isError()) {
    echo HTML::para(_("Building OpenClinic tables..."));
} else {

Example #2

File: patient_del.php Project: edubort/openclinic-1

 */
$returnLocation = "../medical/patient_search_form.php";
/**
 * Checking for post vars. Go back to form if none found.
 */
if (count($_POST) == 0) {
    header("Location: " . $returnLocation);
    exit;
}
/**
 * Checking permissions
 */
require_once "../auth/login_check.php";
loginCheck(OPEN_PROFILE_ADMINISTRATIVE);
require_once "../lib/Form.php";
Form::compareToken('../medical/patient_search_form.php');
require_once "../model/Query/History.php";
require_once "../model/Query/Page/Patient.php";
require_once "../model/Query/Relative.php";
// referencial integrity
require_once "../model/Query/DelPatient.php";
require_once "../model/Query/Page/Problem.php";
// referencial integrity
require_once "../model/Query/DelProblem.php";
// referencial integrity
require_once "../model/Query/Page/Record.php";
/**
 * Retrieving post vars
 */
$idPatient = intval($_POST["id_patient"]);
$patName = Check::safeText($_POST["name"]);

Example #3

File: theme_preload_css.php Project: edubort/openclinic-1

$fromCopy = isset($_GET["copy"]) ? true : false;
/**
 * Controlling vars
 */
$tab = "admin";
$nav = "themes";
$returnLocation = $idTheme > 0 ? $fromCopy ? '../admin/theme_new_form.php?id_theme=' . $idTheme : '../admin/theme_edit_form.php?id_theme=' . $idTheme : '../admin/theme_new_form.php';
/**
 * Checking permissions
 */
require_once "../auth/login_check.php";
loginCheck(OPEN_PROFILE_ADMINISTRATOR, false);
// Not in DEMO to prevent users' malice // We'll see
require_once "../lib/Form.php";
if (count($_POST) > 0) {
    Form::compareToken($returnLocation);
}
require_once "../lib/Check.php";
if (!empty($_FILES['css_filename']['name']) && $_FILES['css_filename']['size'] > 0) {
    $cssRules = fread(fopen($_FILES['css_filename']['tmp_name'], 'r'), $_FILES['css_filename']['size']);
    $cssRules = Check::safeText($cssRules, false);
    //Error::debug($cssRules);
    $_POST['css_file'] = $_FILES['css_filename']['name'];
    $_POST['css_rules'] = $cssRules;
    Form::setSession($_POST);
    header("Location: " . $returnLocation);
    exit;
}
/**
 * Show page
 */

Example #4

File: patient_validate_post.php Project: edubort/openclinic-1

 *
 * Validate post data of a patient
 *
 * Licensed under the GNU GPL. For full terms see the file LICENSE.
 *
 * @package   OpenClinic
 * @copyright 2002-2013 jact
 * @license   http://www.gnu.org/copyleft/gpl.html GNU GPL
 * @version   CVS: $Id: patient_validate_post.php,v 1.14 2013/01/07 18:24:46 jact Exp $
 * @author    jact <*****@*****.**>
 * @since     0.6
 */
require_once dirname(__FILE__) . "/../lib/exe_protect.php";
executionProtection(__FILE__);
require_once "../lib/Form.php";
Form::compareToken($errorLocation);
//$pat->setLastUpdateDate($_POST["last_update_date"]);
//$_POST["last_update_date"] = $pat->getLastUpdateDate();
$pat->setIdMember($_POST["id_member"]);
$_POST["id_member"] = $pat->getIdMember();
$pat->setNIF($_POST["nif"]);
$_POST["nif"] = $pat->getNIF();
$pat->setFirstName($_POST["first_name"]);
$_POST["first_name"] = $pat->getFirstName();
$pat->setSurname1($_POST["surname1"]);
$_POST["surname1"] = $pat->getSurname1();
$pat->setSurname2($_POST["surname2"]);
$_POST["surname2"] = $pat->getSurname2();
$pat->setAddress($_POST["address"]);
$_POST["address"] = $pat->getAddress();
$pat->setPhone($_POST["phone_contact"]);

Example #5

File: setting_edit.php Project: edubort/openclinic-1

 * @author    jact <*****@*****.**>
 */
/**
 * Checking for post vars. Go back to form if none found.
 */
if (count($_POST) == 0) {
    header("Location: ../admin/setting_edit_form.php");
    exit;
}
/**
 * Checking permissions
 */
require_once "../auth/login_check.php";
loginCheck(OPEN_PROFILE_ADMINISTRATOR);
require_once "../lib/Form.php";
Form::compareToken('../admin/setting_edit_form.php');
require_once "../model/Query/Setting.php";
/**
 * Validate data
 */
$set = new Setting();
$set->setClinicName($_POST["clinic_name"]);
$_POST["clinic_name"] = $set->getClinicName();
$set->setClinicHours($_POST["clinic_hours"]);
$_POST["clinic_hours"] = $set->getClinicHours();
$set->setClinicAddress($_POST["clinic_address"]);
$_POST["clinic_address"] = $set->getClinicAddress();
$set->setClinicPhone($_POST["clinic_phone"]);
$_POST["clinic_phone"] = $set->getClinicPhone();
$set->setClinicUrl($_POST["clinic_url"]);
$_POST["clinic_url"] = $set->getClinicUrl();

Example #6

File: relative_new.php Project: edubort/openclinic-1

 * @author    jact <*****@*****.**>
 */
/**
 * Checking for post vars. Go back to form if none found.
 */
if (count($_POST) == 0) {
    header("Location: ../medical/patient_new_form.php");
    exit;
}
/**
 * Checking permissions
 */
require_once "../auth/login_check.php";
loginCheck(OPEN_PROFILE_ADMINISTRATIVE);
require_once "../lib/Form.php";
Form::compareToken('../medical/patient_new_form.php');
require_once "../model/Query/Relative.php";
require_once "../model/Query/Page/Record.php";
/**
 * Retrieving post var
 */
$idPatient = intval($_POST["id_patient"]);
/**
 * Prevent user from aborting script
 */
$oldAbort = ignore_user_abort(true);
/**
 * Insert new relatives patient
 */
$relQ = new Query_Relative();
$relQ->captureError(true);

Example #7

File: dump_process.php Project: edubort/openclinic-1

 * @license   http://www.gnu.org/copyleft/gpl.html GNU GPL
 * @version   CVS: $Id: dump_process.php,v 1.21 2008/03/23 11:58:56 jact Exp $
 * @author    jact <*****@*****.**>
 */
/**
 * Controlling vars
 */
$tab = "admin";
$nav = "dump";
/**
 * Checking permissions
 */
require_once "../auth/login_check.php";
loginCheck(OPEN_PROFILE_ADMINISTRATOR);
require_once "../lib/Form.php";
Form::compareToken('../admin/dump_view_form.php');
require_once "../lib/Dump.php";
require_once "../lib/Check.php";
/**
 * Increase time limit for script execution and initializes some variables
 */
@set_time_limit(OPEN_EXEC_TIME_LIMIT);
$dumpBuffer = "";
$_POST = Check::safeArray($_POST);
/**
 * Send headers depending on whether the user choosen to download a dump file or not
 */
// No download
if (empty($_POST['as_file'])) {
    /**
     * Show page