EwNZ3iUV

1Mage_Adminhtml_Controller_Action::_validateSecretKey
2{
3    if (is_array($this->_publicActions) && in_array($this->getRequest()->getActionName(), $this->_publicActions)) {
4        return true;
5    }
6
7    if (!($secretKey = $this->getRequest()->getParam(Mage_Adminhtml_Model_Url::SECRET_KEY_PARAM_NAME, null))
8        || $secretKey != Mage::getSingleton('adminhtml/url')->getSecretKey()) {
9        return false;
10    }
11    return true;
12}