summaryrefslogtreecommitdiffstats
path: root/lst
diff options
context:
space:
mode:
authorThierry Vignaud <tvignaud@mandriva.org>2001-07-31 16:37:35 +0000
committerThierry Vignaud <tvignaud@mandriva.org>2001-07-31 16:37:35 +0000
commit7d1d0483a64c649b8605cc9069f32cd7d8048858 (patch)
tree61e434a5ddd43ff9439b2aa570315a052d6642f2 /lst
parent7859c6d0a2766a4c0802622b836dadd31d47f510 (diff)
downloadldetect-lst-7d1d0483a64c649b8605cc9069f32cd7d8048858.tar
ldetect-lst-7d1d0483a64c649b8605cc9069f32cd7d8048858.tar.gz
ldetect-lst-7d1d0483a64c649b8605cc9069f32cd7d8048858.tar.bz2
ldetect-lst-7d1d0483a64c649b8605cc9069f32cd7d8048858.tar.xz
ldetect-lst-7d1d0483a64c649b8605cc9069f32cd7d8048858.zip
dd studioDV from pinnacle
Diffstat (limited to 'lst')
-rw-r--r--lst/pcitable1
1 files changed, 1 insertions, 0 deletions
diff --git a/lst/pcitable b/lst/pcitable
index 601a8b39..fce48ad3 100644
--- a/lst/pcitable
+++ b/lst/pcitable
@@ -619,6 +619,7 @@
0x104c 0x8000 "unknown" "Texas Instruments|PCILynx/PCILynx2 IEEE 1394 Link Layer Controller"
0x104c 0x8009 "unknown" "Texas Instruments|OHCI Compliant FireWire Controller"
0x104c 0x8019 "unknown" "Texas Instruments|TSB12LV23 OHCI Compliant IEEE-1394 Controller"
+0x104c 0x8020 "unknown" "Pinnacle|eee1394 controller studioDV"
0x104c 0xa001 "unknown" "Texas Instruments|TDC1570"
0x104c 0xa100 "unknown" "Texas Instruments|TDC1561"
0x104c 0xac10 "unknown" "Texas Instruments|PCI1050"
generated by cgit v1.2.1 (git 2.21.0) at 2024-08-15 22:23:32 +0000
a> 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 
<?php
/**
*
* @package auth
* @copyright (c) 2013 phpBB Group
* @license http://opensource.org/licenses/gpl-2.0.php GNU General Public License v2
*
*/

/**
* @ignore
*/
if (!defined('IN_PHPBB'))
{
	exit;
}

/**
 * Database authentication provider for phpBB3
 *
 * This is for authentication via the integrated user table
 *
 * @package auth
 */
class phpbb_auth_provider_db extends phpbb_auth_provider_base
{

	/**
	 * Database Authentication Constructor
	 *
	 * @param	phpbb_db_driver	$db
	 * @param	phpbb_config 	$config
	 * @param	phpbb_request	$request
	 * @param	phpbb_user		$user
	 * @param	string			$phpbb_root_path
	 * @param	string			$php_ext
	 */
	public function __construct(phpbb_db_driver $db, phpbb_config $config, phpbb_request $request, phpbb_user $user, $phpbb_root_path, $php_ext)
	{
		$this->db = $db;
		$this->config = $config;
		$this->request = $request;
		$this->user = $user;
		$this->phpbb_root_path = $phpbb_root_path;
		$this->php_ext = $php_ext;
	}

	/**
	 * {@inheritdoc}
	 */
	public function login($username, $password)
	{
		// Auth plugins get the password untrimmed.
		// For compatibility we trim() here.
		$password = trim($password);

		// do not allow empty password
		if (!$password)
		{
			return array(
				'status'	=> LOGIN_ERROR_PASSWORD,
				'error_msg'	=> 'NO_PASSWORD_SUPPLIED',
				'user_row'	=> array('user_id' => ANONYMOUS),
			);
		}

		if (!$username)
		{
			return array(
				'status'	=> LOGIN_ERROR_USERNAME,
				'error_msg'	=> 'LOGIN_ERROR_USERNAME',
				'user_row'	=> array('user_id' => ANONYMOUS),
			);
		}

		$username_clean = utf8_clean_string($username);

		$sql = 'SELECT user_id, username, user_password, user_passchg, user_pass_convert, user_email, user_type, user_login_attempts
			FROM ' . USERS_TABLE . "
			WHERE username_clean = '" . $this->db->sql_escape($username_clean) . "'";
		$result = $this->db->sql_query($sql);
		$row = $this->db->sql_fetchrow($result);
		$this->db->sql_freeresult($result);

		if (($this->user->ip && !$this->config['ip_login_limit_use_forwarded']) ||
			($this->user->forwarded_for && $this->config['ip_login_limit_use_forwarded']))
		{
			$sql = 'SELECT COUNT(*) AS attempts
				FROM ' . LOGIN_ATTEMPT_TABLE . '
				WHERE attempt_time > ' . (time() - (int) $this->config['ip_login_limit_time']);
			if ($this->config['ip_login_limit_use_forwarded'])
			{
				$sql .= " AND attempt_forwarded_for = '" . $this->db->sql_escape($this->user->forwarded_for) . "'";
			}
			else
			{
				$sql .= " AND attempt_ip = '" . $this->db->sql_escape($this->user->ip) . "' ";
			}

			$result = $this->db->sql_query($sql);
			$attempts = (int) $this->db->sql_fetchfield('attempts');
			$this->db->sql_freeresult($result);

			$attempt_data = array(
				'attempt_ip'			=> $this->user->ip,
				'attempt_browser'		=> trim(substr($this->user->browser, 0, 149)),
				'attempt_forwarded_for'	=> $this->user->forwarded_for,
				'attempt_time'			=> time(),
				'user_id'				=> ($row) ? (int) $row['user_id'] : 0,
				'username'				=> $username,
				'username_clean'		=> $username_clean,
			);
			$sql = 'INSERT INTO ' . LOGIN_ATTEMPT_TABLE . $this->db->sql_build_array('INSERT', $attempt_data);
			$result = $this->db->sql_query($sql);
		}
		else
		{
			$attempts = 0;
		}

		if (!$row)
		{
			if ($this->config['ip_login_limit_max'] && $attempts >= $this->config['ip_login_limit_max'])
			{
				return array(
					'status'		=> LOGIN_ERROR_ATTEMPTS,
					'error_msg'		=> 'LOGIN_ERROR_ATTEMPTS',
					'user_row'		=> array('user_id' => ANONYMOUS),
				);
			}

			return array(
				'status'	=> LOGIN_ERROR_USERNAME,
				'error_msg'	=> 'LOGIN_ERROR_USERNAME',
				'user_row'	=> array('user_id' => ANONYMOUS),
			);
		}

		$show_captcha = ($this->config['max_login_attempts'] && $row['user_login_attempts'] >= $this->config['max_login_attempts']) ||
			($this->config['ip_login_limit_max'] && $attempts >= $this->config['ip_login_limit_max']);

		// If there are too many login attempts, we need to check for a confirm image
		// Every auth module is able to define what to do by itself...
		if ($show_captcha)
		{
			// Visual Confirmation handling
			if (!class_exists('phpbb_captcha_factory', false))
			{
				include ($this->phpbb_root_path . 'includes/captcha/captcha_factory.' . $this->php_ext);
			}

			$captcha = phpbb_captcha_factory::get_instance($this->config['captcha_plugin']);
			$captcha->init(CONFIRM_LOGIN);
			$vc_response = $captcha->validate($row);
			if ($vc_response)
			{
				return array(
					'status'		=> LOGIN_ERROR_ATTEMPTS,
					'error_msg'		=> 'LOGIN_ERROR_ATTEMPTS',
					'user_row'		=> $row,
				);
			}
			else
			{
				$captcha->reset();
			}

		}

		// If the password convert flag is set we need to convert it
		if ($row['user_pass_convert'])
		{
			// enable super globals to get literal value
			// this is needed to prevent unicode normalization
			$super_globals_disabled = $this->request->super_globals_disabled();
			if ($super_globals_disabled)
			{
				$this->request->enable_super_globals();
			}

			// in phpBB2 passwords were used exactly as they were sent, with addslashes applied
			$password_old_format = isset($_REQUEST['password']) ? (string) $_REQUEST['password'] : '';
			$password_old_format = (!STRIP) ? addslashes($password_old_format) : $password_old_format;
			$password_new_format = $this->request->variable('password', '', true);

			if ($super_globals_disabled)
			{
				$this->request->disable_super_globals();
			}

			if ($password == $password_new_format)
			{
				if (!function_exists('utf8_to_cp1252'))
				{
					include($this->phpbb_root_path . 'includes/utf/data/recode_basic.' . $this->php_ext);
				}

				// cp1252 is phpBB2's default encoding, characters outside ASCII range might work when converted into that encoding
				// plain md5 support left in for conversions from other systems.
				if ((strlen($row['user_password']) == 34 && (phpbb_check_hash(md5($password_old_format), $row['user_password']) || phpbb_check_hash(md5(utf8_to_cp1252($password_old_format)), $row['user_password'])))
					|| (strlen($row['user_password']) == 32  && (md5($password_old_format) == $row['user_password'] || md5(utf8_to_cp1252($password_old_format)) == $row['user_password'])))
				{
					$hash = phpbb_hash($password_new_format);

					// Update the password in the users table to the new format and remove user_pass_convert flag
					$sql = 'UPDATE ' . USERS_TABLE . '
						SET user_password = \'' . $this->db->sql_escape($hash) . '\',
							user_pass_convert = 0
						WHERE user_id = ' . $row['user_id'];
					$this->db->sql_query($sql);

					$row['user_pass_convert'] = 0;
					$row['user_password'] = $hash;
				}
				else
				{
					// Although we weren't able to convert this password we have to
					// increase login attempt count to make sure this cannot be exploited
					$sql = 'UPDATE ' . USERS_TABLE . '
						SET user_login_attempts = user_login_attempts + 1
						WHERE user_id = ' . (int) $row['user_id'] . '
							AND user_login_attempts < ' . LOGIN_ATTEMPTS_MAX;
					$this->db->sql_query($sql);

					return array(
						'status'		=> LOGIN_ERROR_PASSWORD_CONVERT,
						'error_msg'		=> 'LOGIN_ERROR_PASSWORD_CONVERT',
						'user_row'		=> $row,
					);
				}
			}
		}

		// Check password ...
		if (!$row['user_pass_convert'] && phpbb_check_hash($password, $row['user_password']))
		{
			// Check for old password hash...
			if (strlen($row['user_password']) == 32)
			{
				$hash = phpbb_hash($password);

				// Update the password in the users table to the new format
				$sql = 'UPDATE ' . USERS_TABLE . "
					SET user_password = '" . $this->db->sql_escape($hash) . "',
						user_pass_convert = 0
					WHERE user_id = {$row['user_id']}";
				$this->db->sql_query($sql);

				$row['user_password'] = $hash;
			}

			$sql = 'DELETE FROM ' . LOGIN_ATTEMPT_TABLE . '
				WHERE user_id = ' . $row['user_id'];
			$this->db->sql_query($sql);

			if ($row['user_login_attempts'] != 0)
			{
				// Successful, reset login attempts (the user passed all stages)
				$sql = 'UPDATE ' . USERS_TABLE . '
					SET user_login_attempts = 0
					WHERE user_id = ' . $row['user_id'];
				$this->db->sql_query($sql);
			}

			// User inactive...