Added RequireAuthToken(). Fixed a possible data input bug.

cubiclesoft · cubiclesoft · commit bc9eb096c9ea · 2019-05-05T07:17:56.000-07:00
diff --git a/extensions/1_security_token.php b/extensions/1_security_token.php
@@ -52,10 +52,16 @@ public function CanHandleRequest($method, $url, $path, $client)
 			return false;
 		}
 
+		// Nearly all extensions should return true.  Since this is a security extension, it provides its own authentication mechanism.
+		public function RequireAuthToken()
+		{
+			return false;
+		}
+
 		public function ProcessRequest($method, $path, $client, &$data)
 		{
 			// Remove WebSocket connections.
-			if ($method === false)  return false;
+			if ($method === false || !is_array($data))  return false;
 
 			if ($this->inittoken !== false)
 			{

Original file line number	Diff line number	Diff line change
`@@ -52,10 +52,16 @@ public function CanHandleRequest($method, $url, $path, $client)`
`52`	`52`	`return false;`
`53`	`53`	`}`
`54`	`54`
	`55`	`+ // Nearly all extensions should return true. Since this is a security extension, it provides its own authentication mechanism.`
	`56`	`+ public function RequireAuthToken()`
	`57`	`+ {`
	`58`	`+ return false;`
	`59`	`+ }`
	`60`	`+`
`55`	`61`	`public function ProcessRequest($method, $path, $client, &$data)`
`56`	`62`	`{`
`57`	`63`	`// Remove WebSocket connections.`
`58`		`- if ($method === false) return false;`
	`64`	`+ if ($method === false \|\| !is_array($data)) return false;`
`59`	`65`
`60`	`66`	`if ($this->inittoken !== false)`
`61`	`67`	`{`