add a method to Action to check session token

diff --git a/lib/action.php b/lib/action.php
index 1b2f7375211364561a9f05409d55758294b5c325..78ca9137a5ec336552bb1734d8bede4a8d3669d0 100644 (file)
--- a/lib/action.php
+++ b/lib/action.php
@@ -1101,4 +1101,22 @@ class Action extends HTMLOutputter // lawsuit
     {
         return Design::siteDesign();
     }
+
+    /**
+     * Check the session token.
+     *
+     * Checks that the current form has the correct session token,
+     * and throw an exception if it does not.
+     *
+     * @return void
+     */
+
+    function checkSessionToken()
+    {
+        // CSRF protection
+        $token = $this->trimmed('token');
+        if (empty($token) || $token != common_session_token()) {
+            $this->clientError(_('There was a problem with your session token.'));
+        }
+    }
 }