Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.This project is not covered by Drupal’s security advisory policy.
Component module (for use by other modules).
Useful for any other module that creates output outside of the Drupal website and need to include links back to the site which contain the identity of a site member. For example, it could be used in an email, personalised PDF, SMS, RSS feed, or voice message to identify the user it's for.
A hash looks something like this: g74sd9hy3
The reason to use an identity hash instead of just the user's uid is that it's easy to find out a uid by going to a member's profile page and looking at the URL.
In the case of an email that contains a link to a webpage where users can change their subscription preferences, or even allows full login to their account, if uid was used instead of an identity hash, then anyone could look up a user's uid and log in to their subscription/account using that uid!
The Identity hash module has been generalised so it can be used by any module that needs this functionality.
Developed by Robert Castelo for Code Positive - Drupal developer and consultation London, UK .
Supporting organizations:
Development and maintenance
Project information
- Module categories: Access Control
1 site reports using this module- Created by Robert Castelo on , updated
This project is not covered by the security advisory policy.
Use at your own risk! It may have publicly disclosed vulnerabilities.
