'token' is a heavily impacted variable name, often used in security mechanisms. The default of token is probably okay, but it should be configurable.

My intent is to replace all references to $_REQUEST['token'] with a function call along these lines:

function tokenauth_url_token() {
  return $_REQUEST[variable_get('tokenauth_query_string', 'token')];
}

UI would be nice, but non-essential.

Comments

Grayside’s picture

Version: 6.x-1.x-dev » 7.x-1.x-dev
Status: Active » Fixed

There are many places in the code that need the key itself, and few places that need to touch the $_REQUEST variable.

Conflicts with devel user switch and other fun problems have impelled me to deal with this now, though without a UI.

http://drupalcode.org/project/tokenauth.git/commit/c71565b

Grayside’s picture

Version: 7.x-1.x-dev » 6.x-1.x-dev
Status: Fixed » Patch (to be ported)
Grayside’s picture

Status: Patch (to be ported) » Fixed

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.