CFLib.org – Common Function Library Project

Description:
After securing a URL by using the URLHash UDF, you can verify that the URL's integrity remains unchanged by verifying the security Hash vale with URLCheckHash.

Return Values:

Example:

Example code will always fail since it checks the CGI variable which will not be correct for this template.

<cfif NOT URLCheckHash()>
  Here you would CFLOCATE, or throw some kind of error.
</cfif>

Parameters:

No arguments.

Full UDF Source:

<cfscript>
/**
 * Used along with URLHash to verify the URL integrity.
 * 
 * @author John Bartlett (&#106;&#98;&#97;&#114;&#116;&#108;&#101;&#116;&#116;&#64;&#115;&#116;&#114;&#97;&#110;&#103;&#101;&#106;&#111;&#117;&#114;&#110;&#101;&#121;&#46;&#99;&#111;&#109;) 
 * @version 1, January 7, 2002 
 */
function URLCheckHash()
{
  var tmp=CGI.Query_String;
  var listL=0;
  var loop=0;
  var URLVar="";
  var HashData="";

  if (IsDefined("URL.Hash"))
  {
    if (URL.Hash NEQ "")
    {
      listL=ListLen(tmp,"&");
      URLVar=ListGetAt(tmp,ListL,"&");
      if (Left(UCase(URLVar),5) EQ "HASH=")
      {
        tmp=ListDeleteAt(tmp,ListL,"&");
      }
      HashData=cgi.Server_Name & cgi.Remote_Addr & cgi.Script_Name & tmp;
      if (URL.Hash EQ Hash(HashData)) return 1;
      else return 0;
    } else return 0;
  } else return 0;
}
</cfscript>