育將電腦工作室 - 線上書籍

6-4-2 20171025上課範例

PHP SMARTY 樣板引擎
===============

一、function.php

```
<pre class="brush:as3;">

#################################################
#  取得token form
#################################################
if (!function_exists("getTokenHTML")) {
  function getTokenHTML() {
    $_SESSION['token'] = substr(md5(uniqid(mt_rand(), 1)), 0, 8);//取得一個亂數
    $pass  = password_hash($_SESSION['token'], PASSWORD_DEFAULT);//加密
    return "<input type='hidden' name='token' id='token' value='{$pass}' />";//傳回隱藏token
  }
}

#################################################
#  verify token 
#################################################
if (!function_exists("verifyToken")) {
  function verifyToken($hash) {
    if (password_verify($_SESSION['token'], $hash)) { //判斷token
      return ;
    }
    redirect_header(WEB_URL, 3000, 'token 驗證失敗');
  }
}
```

二、後台

1. 取得token ```
  <pre class="brush:as3;">
  
  	$token = getTokenHTML();
  	$smarty->assign("token", $token);
  ```
2. 驗證 ```
  <pre class="brush:as3;">
  
  	#驗證token
  	verifyToken($_POST['token']);
  ```
 
三、樣板

在表單中加入 <span style="color:#FF0000;"><{$token}></span>

Title1

Title2

Title3

Title1

Title2

Title3

MarkDown