133 lines
2.9 KiB
PHP
133 lines
2.9 KiB
PHP
<?php
|
|
/**
|
|
* @brief httpPassword, a plugin for Dotclear 2
|
|
*
|
|
* @package Dotclear
|
|
* @subpackage Plugin
|
|
*
|
|
* @author Frederic PLE and contributors
|
|
*
|
|
* @copyright Jean-Christian Denis
|
|
* @copyright GPL-2.0 https://www.gnu.org/licenses/gpl-2.0.html
|
|
*/
|
|
declare(strict_types=1);
|
|
|
|
namespace Dotclear\Plugin\httpPassword;
|
|
|
|
use dcCore;
|
|
|
|
class Utils
|
|
{
|
|
/**
|
|
* Crypt password
|
|
*/
|
|
public static function crypt(?string $secret): string
|
|
{
|
|
switch (self::cryptMethod()) {
|
|
case 'plaintext':
|
|
$saltlen = -1;
|
|
$salt = '';
|
|
|
|
break;
|
|
case 'crypt_std_des':
|
|
$saltlen = 2;
|
|
$salt = '';
|
|
|
|
break;
|
|
case 'crypt_ext_des':
|
|
$saltlen = 9;
|
|
$salt = '';
|
|
|
|
break;
|
|
case 'crypt_md5':
|
|
$saltlen = 12;
|
|
$salt = '$1$';
|
|
|
|
break;
|
|
case 'crypt_blowfish':
|
|
$saltlen = 16;
|
|
$salt = '$2$';
|
|
|
|
break;
|
|
case 'crypt_sha256':
|
|
$saltlen = 16;
|
|
$salt = '$5$';
|
|
|
|
break;
|
|
case 'crypt_sha512':
|
|
$saltlen = 16;
|
|
$salt = '$6$';
|
|
|
|
break;
|
|
default:
|
|
return '';
|
|
}
|
|
|
|
if ($saltlen > 0) {
|
|
$salt .= substr(
|
|
sha1(dcCore::app()->getNonce() . date('U')),
|
|
2,
|
|
$saltlen - strlen($salt)
|
|
);
|
|
$secret = crypt($secret, $salt);
|
|
}
|
|
|
|
return($secret);
|
|
}
|
|
|
|
/**
|
|
* Setting: active
|
|
*/
|
|
public static function isActive(): bool
|
|
{
|
|
return (bool) dcCore::app()->blog->settings->get(My::id())->get('active');
|
|
}
|
|
|
|
/**
|
|
* Setting: crypt
|
|
*/
|
|
public static function cryptMethod(): string
|
|
{
|
|
return (string) dcCore::app()->blog->settings->get(My::id())->get('crypt');
|
|
}
|
|
|
|
/**
|
|
* Setting: message
|
|
*/
|
|
public static function httpMessage(): string
|
|
{
|
|
return (string) dcCore::app()->blog->settings->get(My::id())->get('message');
|
|
}
|
|
|
|
/**
|
|
* Get passwords file path
|
|
*/
|
|
public static function passwordFile(): string
|
|
{
|
|
return dcCore::app()->blog->public_path . DIRECTORY_SEPARATOR . My::FILE_PASSWORD;
|
|
}
|
|
|
|
/**
|
|
* Check passwords file
|
|
*/
|
|
public static function isWritable(): bool
|
|
{
|
|
if (false === ($fp = fopen(self::passwordFile(), 'a+'))) {
|
|
return false;
|
|
}
|
|
fclose($fp);
|
|
|
|
return true;
|
|
}
|
|
|
|
/**
|
|
* Send HTTP message
|
|
*/
|
|
public static function sendHttp401(): void
|
|
{
|
|
header('HTTP/1.1 401 Unauthorized');
|
|
header('WWW-Authenticate: Basic realm="' . utf8_decode(htmlspecialchars_decode(self::httpMessage())) . '"');
|
|
exit(0);
|
|
}
|
|
}
|