+ $sql = 'SELECT user_id, username, user_password, user_passchg, user_email, user_type, user_login_attempts

+ if ($this->passwords_manager->check($password, $row['user_password']))

+ SET user_password = '" . $this->db->sql_escape($hash) . "'

+ $sql = 'SELECT user_id, username, user_password, user_passchg, user_email, user_type, user_login_attempts

+<?php

+/**

+*

+* This file is part of the phpBB Forum Software package.

+*

+* @copyright (c) phpBB Limited <https://www.phpbb.com>

+* @license GNU General Public License, version 2 (GPL-2.0)

+*

+* For full copyright and license information, please see

+* the docs/CREDITS.txt file.

+*

+*/

+

+namespace phpbb\auth;

+

+use Symfony\Component\DependencyInjection\ContainerInterface;

+

+/**

+* Collection of auth providers to be configured at container compile time.

+*/

+class provider_collection extends \phpbb\di\service_collection

+{

+ /** @var \phpbb\config\config phpBB Config */

+ protected $config;

+

+ /**

+ * Constructor

+ *

+ * @param ContainerInterface $container Container object

+ * @param \phpbb\config\config $config phpBB config

+ */

+ public function __construct($container, \phpbb\config\config $config)

+ {

+ $this->container = $container;

+ $this->config = $config;

+ }

+

+ /**

+ * Get an auth provider.

+ *

+ * @return object Default auth provider selected in config if it

+ * does exist. Otherwise the standard db auth

+ * provider.

+ * @throws \RuntimeException If neither the auth provider that

+ * is specified by the phpBB config nor the db

+ * auth provider exist. The db auth provider

+ * should always exist in a phpBB installation.

+ */

+ public function get_provider()

+ {

+ if ($this->offsetExists('auth.provider.' . basename(trim($this->config['auth_method']))))

+ {

+ return $this->offsetGet('auth.provider.' . basename(trim($this->config['auth_method'])));

+ }

+ // Revert to db auth provider if selected method does not exist

+ elseif ($this->offsetExists('auth.provider.db'))

+ {

+ return $this->offsetGet('auth.provider.db');

+ }

+ else

+ {

+ throw new \RuntimeException(sprintf('The authentication provider for the authentication method "%1$s" does not exist. It was not possible to recover from this by reverting to the database authentication provider.', $this->config['auth_method']));

+ }

+ }

+}

+ array('email'),

+ ),

+ $category = $request->variable('avatar_local_cat', key($avatar_list));

+ 'avatar' => ($category != $user->lang['NO_AVATAR_CATEGORY']) ? $category . '/' . $file : $file,

+ $cat = ($path == $file_path) ? $user->lang['NO_AVATAR_CATEGORY'] : str_replace("$path/", '', $file_path);

+ 'file' => ($cat != $user->lang['NO_AVATAR_CATEGORY']) ? rawurlencode($cat) . '/' . rawurlencode($image) : rawurlencode($image),

+ * @return \ArrayIterator An iterator over all config data

+use Symfony\Component\Console\Shell;

+use Symfony\Component\Console\Input\InputInterface;

+use Symfony\Component\Console\Input\InputOption;

+use Symfony\Component\Console\Output\OutputInterface;

+ /**

+ * @var bool Indicates whether or not we are in a shell

+ */

+ protected $in_shell = false;

+

+ /**

+ * @var \phpbb\user User object

+ */

+ protected $user;

+

+ /**

+ * @param string $name The name of the application

+ * @param string $version The version of the application

+ * @param \phpbb\user $user The user which runs the application (used for translation)

+ */

+ public function __construct($name, $version, \phpbb\user $user)

+ {

+ parent::__construct($name, $version);

+

+ $this->user = $user;

+ }

+

+ /**

+ * Gets the help message.

+ *

+ * It's a hack of the default help message to display the --shell

+ * option only for the application and not for all the commands.

+ *

+ * @return string A help message.

+ */

+ public function getHelp()

+ {

+ // If we are already in a shell

+ // we do not want to have the --shell option available

+ if ($this->in_shell)

+ {

+ return parent::getHelp();

+ }

+

+ $this->getDefinition()->addOption(new InputOption(

+ '--shell',

+ '-s',

+ InputOption::VALUE_NONE,

+ $this->user->lang('CLI_DESCRIPTION_OPTION_SHELL')

+ ));

+

+ return parent::getHelp();

+ }

+

+ /**

+ * Register a set of commands from the container

+ *

+ * @param TaggedContainerInterface $container The container

+ * @param string $tag The tag used to register the commands

+ */

+ public function register_container_commands(TaggedContainerInterface $container, $tag = 'console.command')

+

+ /**

+ * {@inheritdoc}

+ */

+ public function doRun(InputInterface $input, OutputInterface $output)

+ {

+ // Run a shell if the --shell (or -s) option is set and if no command name is specified

+ // Also, we do not want to have the --shell option available if we are already in a shell

+ if (!$this->in_shell && $this->getCommandName($input) === null && $input->hasParameterOption(array('--shell', '-s')))

+ {

+ $shell = new Shell($this);

+ $this->in_shell = true;

+ $shell->run();

+

+ return 0;

+ }

+

+ return parent::doRun($input, $output);

+ }

+<?php

+/**

+*

+* This file is part of the phpBB Forum Software package.

+*

+* @copyright (c) phpBB Limited <https://www.phpbb.com>

+* @license GNU General Public License, version 2 (GPL-2.0)

+*

+* For full copyright and license information, please see

+* the docs/CREDITS.txt file.

+*

+*/

+namespace phpbb\console\command\cron;

+

+use Symfony\Component\Console\Input\InputInterface;

+use Symfony\Component\Console\Output\OutputInterface;

+

+class cron_list extends \phpbb\console\command\command

+{

+ /** @var \phpbb\cron\manager */

+ protected $cron_manager;

+

+ /** @var \phpbb\user */

+ protected $user;

+

+ public function __construct(\phpbb\cron\manager $cron_manager, \phpbb\user $user)

+ {

+ $this->cron_manager = $cron_manager;

+ $this->user = $user;

+ parent::__construct();

+ }

+

+ protected function configure()

+ {

+ $this

+ ->setName('cron:list')

+ ->setDescription($this->user->lang('CLI_DESCRIPTION_CRON_LIST'))

+ ;

+ }

+

+ protected function execute(InputInterface $input, OutputInterface $output)

+ {

+ $tasks = $this->cron_manager->get_tasks();

+

+ if (empty($tasks))

+ {

+ $output->writeln($this->user->lang('CRON_NO_TASKS'));

+ return;

+ }

+

+ $ready_tasks = array();

+ $not_ready_tasks = array();

+ foreach ($tasks as $task)

+ {

+ if ($task->is_ready())

+ {

+ $ready_tasks[] = $task;

+ }

+ else

+ {

+ $not_ready_tasks[] = $task;

+ }

+ }

+

+ if (!empty($ready_tasks))

+ {

+ $output->writeln('<info>' . $this->user->lang('TASKS_READY') . '</info>');

+ $this->print_tasks_names($ready_tasks, $output);

+ }

+

+ if (!empty($ready_tasks) && !empty($not_ready_tasks))

+ {

+ $output->writeln('');

+ }

+

+ if (!empty($not_ready_tasks))

+ {

+ $output->writeln('<info>' . $this->user->lang('TASKS_NOT_READY') . '</info>');

+ $this->print_tasks_names($not_ready_tasks, $output);

+ }

+ }

+

+ protected function print_tasks_names(array $tasks, OutputInterface $output)

+ {

+ foreach ($tasks as $task)

+ {

+ $output->writeln($task->get_name());

+ }

+ }

+}

+ $this->user->add_lang(array('common', 'install', 'migrator'));

+<?php

+/**

+*

+* This file is part of the phpBB Forum Software package.

+*

+* @copyright (c) phpBB Limited <https://www.phpbb.com>

+* @license GNU General Public License, version 2 (GPL-2.0)

+*

+* For full copyright and license information, please see

+* the docs/CREDITS.txt file.

+*

+*/

+namespace phpbb\console\command\dev;

+

+use Symfony\Component\Console\Input\InputInterface;

+use Symfony\Component\Console\Output\OutputInterface;

+

+class migration_tips extends \phpbb\console\command\command

+{

+ /** @var \phpbb\extension\manager */

+ protected $extension_manager;

+

+ function __construct(\phpbb\extension\manager $extension_manager)

+ {

+ $this->extension_manager = $extension_manager;

+ parent::__construct();

+ }

+

+ protected function configure()

+ {

+ $this

+ ->setName('dev:migration-tips')

+ ->setDescription('Finds migrations that are not depended on.')

+ ;

+ }

+

+ protected function execute(InputInterface $input, OutputInterface $output)

+ {

+ $migrations = $this->extension_manager->get_finder()

+ ->set_extensions(array())

+ ->core_path('phpbb/db/migration/data/')

+ ->get_classes();

+ $tips = $migrations;

+

+ foreach ($migrations as $migration_class)

+ {

+ foreach ($migration_class::depends_on() as $dependency)

+ {

+ $tips_key = array_search($dependency, $tips);

+ if ($tips_key !== false)

+ {

+ unset($tips[$tips_key]);

+ }

+ }

+ }

+

+ $output->writeln("\t\tarray(");

+ foreach ($tips as $migration)

+ {

+ $output->writeln("\t\t\t'{$migration}',");

+ }

+ $output->writeln("\t\t);");

+ }

+}

+ * @param \phpbb\finder $finder

+ public function find_routing_files(\phpbb\finder $finder)

+ * Find all tasks and return them.

+ *

+ * @return array List of all tasks.

+ */

+ public function get_tasks()

+ {

+ return $this->tasks;

+ }

+

+ /**

+<?php

+/**

+*

+* @package migration

+* @copyright (c) 2014 phpBB Group

+* @license http://opensource.org/licenses/gpl-2.0.php GNU General Public License v2

+*

+*/

+

+namespace phpbb\db\migration\data\v310;

+

+class contact_admin_acp_module extends \phpbb\db\migration\migration

+{

+ public function update_data()

+ {

+ return array(

+ array('module.add', array(

+ 'acp',

+ 'ACP_BOARD_CONFIGURATION',

+ array(

+ 'module_basename' => 'acp_contact',

+ 'modes' => array('contact'),

+ ),

+ )),

+ );

+ }

+}

+<?php

+/**

+*

+* @package migration

+* @copyright (c) 2014 phpBB Group

+* @license http://opensource.org/licenses/gpl-2.0.php GNU General Public License v2

+*

+*/

+

+namespace phpbb\db\migration\data\v310;

+

+class contact_admin_form extends \phpbb\db\migration\migration

+{

+ public function effectively_installed()

+ {

+ return isset($this->config['contact_admin_form_enable']);

+ }

+

+ public function update_data()

+ {

+ return array(

+ array('config.add', array('contact_admin_form_enable', 1)),

+ array('custom', array(array($this, 'contact_admin_info'))),

+ );

+ }

+

+ public function contact_admin_info()

+ {

+ $text_config = new \phpbb\config\db_text($this->db, $this->table_prefix . 'config_text');

+ $text_config->set_array(array(

+ 'contact_admin_info' => '',

+ 'contact_admin_info_uid' => '',

+ 'contact_admin_info_bitfield' => '',

+ 'contact_admin_info_flags' => OPTION_FLAG_BBCODE + OPTION_FLAG_SMILIES + OPTION_FLAG_LINKS,

+ ));

+ }

+}

+<?php

+/**

+*

+* This file is part of the phpBB Forum Software package.

+*

+* @copyright (c) phpBB Limited <https://www.phpbb.com>

+* @license GNU General Public License, version 2 (GPL-2.0)

+*

+* For full copyright and license information, please see

+* the docs/CREDITS.txt file.

+*

+*/

+

+namespace phpbb\db\migration\data\v310;

+

+class passwords_convert_p1 extends \phpbb\db\migration\migration

+{

+ static public function depends_on()

+ {

+ return array('\phpbb\db\migration\data\v310\passwords_p2');

+ }

+

+ public function update_data()

+ {

+ return array(

+ array('custom', array(array($this, 'update_passwords'))),

+ );

+ }

+

+ public function update_passwords($start)

+ {

+ // Nothing to do if user_pass_convert column doesn't exist

+ if (!$this->db_tools->sql_column_exists($this->table_prefix . 'users', 'user_pass_convert'))

+ {

+ return;

+ }

+

+ $start = (int) $start;

+ $limit = 1000;

+ $converted_users = 0;

+

+ $sql = 'SELECT user_password, user_id

+ FROM ' . $this->table_prefix . 'users

+ WHERE user_pass_convert = 1

+ GROUP BY user_id

+ ORDER BY user_id';

+ $result = $this->db->sql_query_limit($sql, $limit, $start);

+

+ $update_users = array();

+ while ($row = $this->db->sql_fetchrow($result))

+ {

+ $converted_users++;

+

+ $user_id = (int) $row['user_id'];

+ // Only prefix passwords without proper prefix

+ if (!isset($update_users[$user_id]) && !preg_match('#^\$([a-zA-Z0-9\\\]*?)\$#', $row['user_password']))

+ {

+ // Use $CP$ prefix for passwords that need to

+ // be converted and set pass convert to false.

+ $update_users[$user_id] = array(

+ 'user_password' => '$CP$' . $row['user_password'],

+ 'user_pass_convert' => 0,

+ );

+ }

+ }

+ $this->db->sql_freeresult($result);

+

+ foreach ($update_users as $user_id => $user_data)

+ {

+ $sql = 'UPDATE ' . $this->table_prefix . 'users

+ SET ' . $this->db->sql_build_array('UPDATE', $user_data) . '

+ WHERE user_id = ' . $user_id;

+ $this->sql_query($sql);

+ }

+

+ if ($converted_users < $limit)

+ {

+ // There are no more users to be converted

+ return;

+ }

+

+ // There are still more users to query, return the next start value

+ return $start + $limit;

+ }

+}

+<?php

+/**

+*

+* This file is part of the phpBB Forum Software package.

+*

+* @copyright (c) phpBB Limited <https://www.phpbb.com>

+* @license GNU General Public License, version 2 (GPL-2.0)

+*

+* For full copyright and license information, please see

+* the docs/CREDITS.txt file.

+*

+*/

+

+namespace phpbb\db\migration\data\v310;

+

+class passwords_convert_p2 extends \phpbb\db\migration\migration

+{

+ public function effectively_installed()

+ {

+ return !$this->db_tools->sql_column_exists($this->table_prefix . 'users', 'user_pass_convert');

+ }

+

+ static public function depends_on()

+ {

+ return array('\phpbb\db\migration\data\v310\passwords_convert_p1');

+ }

+

+ public function update_schema()

+ {

+ return array(

+ 'drop_columns' => array(

+ $this->table_prefix . 'users' => array(

+ 'user_pass_convert',

+ ),

+ ),

+ );

+ }

+

+ public function revert_schema()

+ {

+ return array(

+ 'add_columns' => array(

+ $this->table_prefix . 'users' => array(

+ 'user_pass_convert' => array('BOOL', 0, 'after' => 'user_passchg'),

+ ),

+ ),

+ );

+ }

+}

+ * @param \phpbb\finder $finder

+ public function load_migrations(\phpbb\finder $finder, $path, $check_fulfillable = true)

+ /** @var \phpbb\finder */

+ * @param \phpbb\finder $extension_finder

+ public function __construct(ContainerInterface $container, \phpbb\finder $extension_finder, \phpbb\db\migrator $migrator, $extension_name, $extension_path)

+ * Instantiates a \phpbb\finder.

+ * @param bool $use_all_available Should we load all extensions, or just enabled ones

+ * @return \phpbb\finder An extension finder instance

+ public function get_finder($use_all_available = false)

+ $finder = new \phpbb\finder($this->filesystem, $this->phpbb_root_path, $this->cache, $this->php_ext, $this->cache_name . '_finder');

+ if ($use_all_available)

+ {

+ $finder->set_extensions(array_keys($this->all_available()));

+ }

+ else

+ {

+ $finder->set_extensions(array_keys($this->all_enabled()));

+ }

+ return $finder;

+namespace phpbb;

+* The finder provides a simple way to locate files in the core and a set of extensions

+ protected $extensions;

+ public function __construct(\phpbb\filesystem $filesystem, $phpbb_root_path = '', \phpbb\cache\driver\driver_interface $cache = null, $php_ext = 'php', $cache_name = '_ext_finder')

+ $this->extensions = array();

+ * Set the array of extensions

+ *

+ * @param array $extensions A list of extensions that should be searched aswell

+ * @param bool $replace_list Should the list be emptied before adding the extensions

+ * @return \phpbb\finder This object for chaining calls

+ */

+ public function set_extensions(array $extensions, $replace_list = true)

+ {

+ if ($replace_list)

+ {

+ $this->extensions = array();

+ }

+

+ foreach ($extensions as $ext_name)

+ {

+ $this->extensions[$ext_name] = $this->phpbb_root_path . 'ext/' . $ext_name . '/';

+ }

+ return $this;

+ }

+

+ /**

+ * @return \phpbb\finder This object for chaining calls

+ * @return \phpbb\finder This object for chaining calls

+ * @return \phpbb\finder This object for chaining calls

+ * @return \phpbb\finder This object for chaining calls

+ * @return \phpbb\finder This object for chaining calls

+ * @return \phpbb\finder This object for chaining calls

+ * @return \phpbb\finder This object for chaining calls

+ * @return \phpbb\finder This object for chaining calls

+ * @return \phpbb\finder This object for chaining calls

+ * @return \phpbb\finder This object for chaining calls

+ public function get_classes($cache = true)

+ $files = $this->find($cache, false);

+ public function get_directories($cache = true, $extension_keys = false)

+ return $this->find_with_root_path($cache, true, $extension_keys);

+ public function get_files($cache = true)

+ return $this->find_with_root_path($cache, false);

+ * otherwise

+ protected function find_with_root_path($cache = true, $is_dir = false, $extension_keys = false)

+ $items = $this->find($cache, $is_dir);

+ public function find($cache = true, $is_dir = false)

+ $extensions = $this->extensions;

+

+ if (isset($conditions['keywords']))

+ {

+ $sql_where .= $this->generate_sql_keyword($conditions['keywords'], '');

+

+ unset($conditions['keywords']);

+ }

+

+ if (is_array($field_value) && sizeof($field_value) == 2 && !is_array($field_value[1]))

+ {

+ $sql_where .= $field . ' ' . $field_value[0] . ' ' . $field_value[1];

+ }

+ else if (is_array($field_value) && isset($field_value['IN']) && is_array($field_value['IN']))

+ $sql_where .= $this->db->sql_in_set($field, $field_value['IN']);

+ $sql_where .= $field . ' = ' . $field_value;

+ $sql_keywords = ' ' . $statement_operator . ' (';

+<?php

+/**

+*

+* @package message

+* @copyright (c) 2014 phpBB Group

+* @license http://opensource.org/licenses/gpl-2.0.php GNU General Public License v2

+*

+*/

+

+namespace phpbb\message;

+

+/**

+* Class admin_form

+* Displays a message to the user and allows him to send an email

+*

+* @package phpbb\message

+*/

+class admin_form extends form

+{

+ /** @var \phpbb\config\db_text */

+ protected $config_text;

+

+ /** @var string */

+ protected $subject;

+ /** @var string */

+ protected $sender_name;

+ /** @var string */

+ protected $sender_address;

+

+ /**

+ * Construct

+ *

+ * @param \phpbb\auth\auth $auth

+ * @param \phpbb\config\config $config

+ * @param \phpbb\config\db_text $config_text

+ * @param \phpbb\db\driver\driver_interface $db

+ * @param \phpbb\user $user

+ * @param string $phpbb_root_path

+ * @param string $phpEx

+ */

+ public function __construct(\phpbb\auth\auth $auth, \phpbb\config\config $config, \phpbb\config\db_text $config_text, \phpbb\db\driver\driver_interface $db, \phpbb\user $user, $phpbb_root_path, $phpEx)

+ {

+ parent::__construct($auth, $config, $db, $user, $phpbb_root_path, $phpEx);

+ $this->config_text = $config_text;

+ }

+

+ /**

+ * {inheritDoc}

+ */

+ public function check_allow()

+ {

+ $error = parent::check_allow();

+ if ($error)

+ {

+ return $error;

+ }

+

+ if (!$this->config['contact_admin_form_enable'])

+ {

+ return 'NO_CONTACT_PAGE';

+ }

+

+ return false;

+ }

+

+ /**

+ * {inheritDoc}

+ */

+ public function bind(\phpbb\request\request_interface $request)

+ {

+ parent::bind($request);

+

+ $this->subject = $request->variable('subject', '', true);

+ $this->sender_address = $request->variable('email', '');

+ $this->sender_name = $request->variable('name', '', true);

+ }

+

+ /**

+ * {inheritDoc}

+ */

+ public function submit(\messenger $messenger)

+ {

+ if (!$this->subject)

+ {

+ $this->errors[] = $this->user->lang['EMPTY_SUBJECT_EMAIL'];

+ }

+ if (!$this->body)

+ {

+ $this->errors[] = $this->user->lang['EMPTY_MESSAGE_EMAIL'];

+ }

+

+ if ($this->user->data['is_registered'])

+ {

+ $this->message->set_sender_from_user($this->user);

+ $this->sender_name = $this->user->data['username'];

+ $this->sender_address = $this->user->data['user_email'];

+ }

+ else

+ {

+ if (!$this->sender_name)

+ {

+ $this->errors[] = $this->user->lang['EMPTY_SENDER_NAME'];

+ }

+

+ if (!function_exists('validate_data'))

+ {

+ require($this->phpbb_root_path . 'includes/functions_user.' . $this->phpEx);

+ }

+

+ $validate_array = validate_data(

+ array(

+ 'email' => $this->sender_address,

+ ),

+ array(

+ 'email' => array(

+ array('string', false, 6, 60),

+ array('email'),

+ ),

+ )

+ );

+

+ foreach ($validate_array as $error)

+ {

+ $this->errors[] = $this->user->lang[$error];

+ }

+

+ $this->message->set_sender($this->user->ip, $this->sender_name, $this->sender_address, $this->user->lang_name);

+ $this->message->set_sender_notify_type(NOTIFY_EMAIL);

+ }

+

+ $this->message->set_template('contact_admin');

+ $this->message->set_subject($this->subject);

+ $this->message->set_body($this->body);

+ $this->message->add_recipient(

+ $this->user->lang['ADMINISTRATOR'],

+ $this->config['board_contact'],

+ $this->config['default_lang'],

+ NOTIFY_EMAIL

+ );

+

+ $this->message->set_template_vars(array(

+ 'FROM_EMAIL_ADDRESS' => $this->sender_address,

+ 'FROM_IP_ADDRESS' => $this->user->ip,

+ 'S_IS_REGISTERED' => $this->user->data['is_registered'],

+

+ 'U_FROM_PROFILE' => generate_board_url() . '/memberlist.' . $this->phpEx . '?mode=viewprofile&u=' . $this->user->data['user_id'],

+ ));

+

+ parent::submit($messenger);

+ }

+

+ /**

+ * {inheritDoc}

+ */

+ public function render(\phpbb\template\template $template)

+ {

+ $l_admin_info = $this->config_text->get('contact_admin_info');

+ if ($l_admin_info)

+ {

+ $contact_admin_data = $this->config_text->get_array(array(

+ 'contact_admin_info',

+ 'contact_admin_info_uid',

+ 'contact_admin_info_bitfield',

+ 'contact_admin_info_flags',

+ ));

+

+ $l_admin_info = generate_text_for_display(

+ $contact_admin_data['contact_admin_info'],

+ $contact_admin_data['contact_admin_info_uid'],

+ $contact_admin_data['contact_admin_info_bitfield'],

+ $contact_admin_data['contact_admin_info_flags']

+ );

+ }

+

+ $template->assign_vars(array(

+ 'S_CONTACT_ADMIN' => true,

+ 'S_CONTACT_FORM' => $this->config['contact_admin_form_enable'],

+ 'S_IS_REGISTERED' => $this->user->data['is_registered'],

+

+ 'CONTACT_INFO' => $l_admin_info,

+ 'MESSAGE' => $this->body,

+ 'SUBJECT' => $this->subject,

+ 'NAME' => $this->sender_name,

+ 'EMAIL' => $this->sender_address,

+ ));

+

+ parent::render($template);

+ }

+}

+<?php

+/**

+*

+* @package message

+* @copyright (c) 2014 phpBB Group

+* @license http://opensource.org/licenses/gpl-2.0.php GNU General Public License v2

+*

+*/

+

+namespace phpbb\message;

+

+/**

+* Abstract class form

+*

+* @package phpbb\message

+*/

+abstract class form

+{

+ /** @var \phpbb\auth\auth */

+ protected $auth;

+ /** @var \phpbb\config\config */

+ protected $config;

+ /** @var \phpbb\db\driver\driver_interface */

+ protected $db;

+ /** @var \phpbb\message\message */

+ protected $message;

+ /** @var \phpbb\user */

+ protected $user;

+

+ /** @var string */

+ protected $phpbb_root_path;

+ /** @var string */

+ protected $phpEx;

+

+ /** @var array */

+ protected $errors = array();

+ /** @var bool */

+ protected $cc_sender;

+ /** @var string */

+ protected $body;

+

+ /**

+ * Construct

+ *

+ * @param \phpbb\auth\auth $auth

+ * @param \phpbb\config\config $config

+ * @param \phpbb\db\driver\driver_interface $db

+ * @param \phpbb\user $user

+ * @param string $phpbb_root_path

+ * @param string $phpEx

+ */

+ public function __construct(\phpbb\auth\auth $auth, \phpbb\config\config $config, \phpbb\db\driver\driver_interface $db, \phpbb\user $user, $phpbb_root_path, $phpEx)

+ {

+ $this->phpbb_root_path = $phpbb_root_path;

+ $this->phpEx = $phpEx;

+ $this->user = $user;

+ $this->auth = $auth;

+ $this->config = $config;

+ $this->db = $db;

+

+ $this->message = new message($config['server_name']);

+ $this->message->set_sender_from_user($this->user);

+ }

+

+ /**

+ * Returns the title for the email form page

+ *

+ * @return string

+ */

+ public function get_page_title()

+ {

+ return $this->user->lang['SEND_EMAIL'];

+ }

+

+ /**

+ * Returns the file name of the form template

+ *

+ * @return string

+ */

+ public function get_template_file()

+ {

+ return 'memberlist_email.html';

+ }

+

+ /**

+ * Checks whether the user is allowed to use the form

+ *

+ * @return false|string Error string if not allowed, false otherwise

+ */

+ public function check_allow()

+ {

+ if (!$this->config['email_enable'])

+ {

+ return 'EMAIL_DISABLED';

+ }

+

+ if (time() - $this->user->data['user_emailtime'] < $this->config['flood_interval'])

+ {

+ return 'FLOOD_EMAIL_LIMIT';

+ }

+

+ return false;

+ }

+

+ /**

+ * Get the return link after the message has been sent

+ *

+ * @return string

+ */

+ public function get_return_message()

+ {

+ return sprintf($this->user->lang['RETURN_INDEX'], '<a href="' . append_sid($this->phpbb_root_path . 'index.' . $this->phpEx) . '">', '</a>');

+ }

+

+ /**

+ * Bind the values of the request to the form

+ *

+ * @param \phpbb\request\request_interface $request

+ * @return null

+ */

+ public function bind(\phpbb\request\request_interface $request)

+ {

+ $this->cc_sender = $request->is_set_post('cc_sender');

+ $this->body = $request->variable('message', '', true);

+ }

+

+ /**

+ * Submit form, generate the email and send it

+ *

+ * @param \messenger $messenger

+ * @return null

+ */

+ public function submit(\messenger $messenger)

+ {

+ if (!check_form_key('memberlist_email'))

+ {

+ $this->errors[] = 'FORM_INVALID';

+ }

+

+ if (!sizeof($this->errors))

+ {

+ $sql = 'UPDATE ' . USERS_TABLE . '

+ SET user_emailtime = ' . time() . '

+ WHERE user_id = ' . $this->user->data['user_id'];

+ $this->db->sql_query($sql);

+

+ if ($this->cc_sender)

+ {

+ $this->message->cc_sender();

+ }

+

+ $this->message->send($messenger, phpbb_get_board_contact($this->config, $this->phpEx));

+

+ meta_refresh(3, append_sid($this->phpbb_root_path . 'index.' . $this->phpEx));

+ trigger_error($this->user->lang['EMAIL_SENT'] . '<br /><br />' . $this->get_return_message());

+ }

+ }

+

+ /**

+ * Render the template of the form

+ *

+ * @param \phpbb\template\template $template

+ * @return null

+ */

+ public function render(\phpbb\template\template $template)

+ {

+ add_form_key('memberlist_email');

+

+ $template->assign_vars(array(

+ 'ERROR_MESSAGE' => (sizeof($this->errors)) ? implode('<br />', $this->errors) : '',

+ ));

+ }

+}

+<?php

+/**

+*

+* @package message

+* @copyright (c) 2014 phpBB Group

+* @license http://opensource.org/licenses/gpl-2.0.php GNU General Public License v2

+*

+*/

+

+namespace phpbb\message;

+

+/**

+* Class message

+* Holds all information for an email and sends it in the end

+*

+* @package phpbb\message

+*/

+class message

+{

+ /** @var string */

+ protected $server_name;

+

+ /** @var string */

+ protected $subject = '';

+ /** @var string */

+ protected $body = '';

+ /** @var string */

+ protected $template = '';

+ /** @var array */

+ protected $template_vars = array();

+

+ /** @var string */

+ protected $sender_ip = '';

+ /** @var string */

+ protected $sender_name = '';

+ /** @var string */

+ protected $sender_address = '';

+ /** @var string */

+ protected $sender_lang = '';

+ /** @var string */

+ protected $sender_id = '';

+ /** @var string */

+ protected $sender_username = '';

+ /** @var string */

+ protected $sender_jabber = '';

+ /** @var int */

+ protected $sender_notify_type = NOTIFY_EMAIL;

+

+ /** @var array */

+ protected $recipients;

+

+ /**

+ * Construct

+ *

+ * @param string $server_name Used for AntiAbuse header

+ */

+ public function __construct($server_name)

+ {

+ $this->server_name = $server_name;

+ }

+

+ /**

+ * Set the subject of the email

+ *

+ * @param string $subject

+ * @return null

+ */

+ public function set_subject($subject)

+ {

+ $this->subject = $subject;

+ }

+

+ /**

+ * Set the body of the email text

+ *

+ * @param string $body

+ * @return null

+ */

+ public function set_body($body)

+ {

+ $this->body = $body;

+ }

+

+ /**

+ * Set the name of the email template to use

+ *

+ * @param string $template

+ * @return null

+ */

+ public function set_template($template)

+ {

+ $this->template = $template;

+ }

+

+ /**

+ * Set the array with the "template" data for the email

+ *

+ * @param array $template_vars

+ * @return null

+ */

+ public function set_template_vars($template_vars)

+ {

+ $this->template_vars = $template_vars;

+ }

+

+ /**

+ * Add a recipient from \phpbb\user

+ *

+ * @param \phpbb\user $user

+ * @return null

+ */

+ public function add_recipient_from_user_row(array $user)

+ {

+ $this->add_recipient(

+ $user['username'],

+ $user['user_email'],

+ $user['user_lang'],

+ $user['user_notify_type'],

+ $user['username'],

+ $user['user_jabber']

+ );

+ }

+

+ /**

+ * Add a recipient

+ *

+ * @param string $recipient_name Displayed sender name

+ * @param string $recipient_address Email address

+ * @param string $recipient_lang

+ * @param int $recipient_notify_type Used notification methods (Jabber, Email, ...)

+ * @param string $recipient_username User Name (used for AntiAbuse header)

+ * @param string $recipient_jabber

+ * @return null

+ */

+ public function add_recipient($recipient_name, $recipient_address, $recipient_lang, $recipient_notify_type = NOTIFY_EMAIL, $recipient_username = '', $recipient_jabber = '')

+ {

+ $this->recipients[] = array(

+ 'name' => $recipient_name,

+ 'address' => $recipient_address,

+ 'lang' => $recipient_lang,

+ 'username' => $recipient_username,

+ 'jabber' => $recipient_jabber,

+ 'notify_type' => $recipient_notify_type,

+ 'to_name' => $recipient_name,

+ );

+ }

+

+ /**

+ * Set the senders data from \phpbb\user object

+ *

+ * @param \phpbb\user $user

+ * @return null

+ */

+ public function set_sender_from_user($user)

+ {

+ $this->set_sender(

+ $user->ip,

+ $user->data['username'],

+ $user->data['user_email'],

+ $user->lang_name,

+ $user->data['user_id'],

+ $user->data['username'],

+ $user->data['user_jabber']

+ );

+

+ $this->set_sender_notify_type($user->data['user_notify_type']);

+ }

+

+ /**

+ * Set the senders data

+ *

+ * @param string $sender_ip

+ * @param string $sender_name Displayed sender name

+ * @param string $sender_address Email address

+ * @param string $sender_lang

+ * @param int $sender_id User ID

+ * @param string $sender_username User Name (used for AntiAbuse header)

+ * @param string $sender_jabber

+ * @return null

+ */

+ public function set_sender($sender_ip, $sender_name, $sender_address, $sender_lang = '', $sender_id = 0, $sender_username = '', $sender_jabber = '')

+ {

+ $this->sender_ip = $sender_ip;

+ $this->sender_name = $sender_name;

+ $this->sender_address = $sender_address;

+ $this->sender_lang = $sender_lang;

+ $this->sender_id = $sender_id;

+ $this->sender_username = $sender_username;

+ $this->sender_jabber = $sender_jabber;

+ }

+

+ /**

+ * Which notification type should be used? Jabber, Email, ...?

+ *

+ * @param int $sender_notify_type

+ * @return null

+ */

+ public function set_sender_notify_type($sender_notify_type)

+ {

+ $this->sender_notify_type = $sender_notify_type;

+ }

+

+ /**

+ * Ok, now the same email if CC specified, but without exposing the user's email address

+ *

+ * @return null

+ */

+ public function cc_sender()

+ {

+ if (!sizeof($this->recipients))

+ {

+ trigger_error('No email recipients specified');

+ }

+ if (!$this->sender_address)

+ {

+ trigger_error('No email sender specified');

+ }

+

+ $this->recipients[] = array(

+ 'lang' => $this->sender_lang,

+ 'address' => $this->sender_address,

+ 'name' => $this->sender_name,

+ 'username' => $this->sender_username,

+ 'jabber' => $this->sender_jabber,

+ 'notify_type' => $this->sender_notify_type,

+ 'to_name' => $this->recipients[0]['to_name'],

+ );

+ }

+

+ /**

+ * Send the email

+ *

+ * @param \messenger $messenger

+ * @param string $phpEx

+ * @return null

+ */

+ public function send(\messenger $messenger, $contact)

+ {

+ if (!sizeof($this->recipients))

+ {

+ return;

+ }

+

+ foreach ($this->recipients as $recipient)

+ {

+ $messenger->template($this->template, $recipient['lang']);

+ $messenger->replyto($this->sender_address);

+ $messenger->to($recipient['address'], $recipient['name']);

+ $messenger->im($recipient['jabber'], $recipient['username']);

+

+ $messenger->headers('X-AntiAbuse: Board servername - ' . $this->server_name);

+ $messenger->headers('X-AntiAbuse: User IP - ' . $this->sender_ip);

+

+ if ($this->sender_id)

+ {

+ $messenger->headers('X-AntiAbuse: User_id - ' . $this->sender_id);

+ }

+ if ($this->sender_username)

+ {

+ $messenger->headers('X-AntiAbuse: Username - ' . $this->sender_username);

+ }

+

+ $messenger->subject(htmlspecialchars_decode($this->subject));

+

+ $messenger->assign_vars(array(

+ 'BOARD_CONTACT' => $contact,

+ 'TO_USERNAME' => htmlspecialchars_decode($recipient['to_name']),

+ 'FROM_USERNAME' => htmlspecialchars_decode($this->sender_name),

+ 'MESSAGE' => htmlspecialchars_decode($this->body))

+ );

+

+ if (sizeof($this->template_vars))

+ {

+ $messenger->assign_vars($this->template_vars);

+ }

+

+ $messenger->send($recipient['notify_type']);

+ }

+ }

+}

+<?php

+/**

+*

+* @package message

+* @copyright (c) 2014 phpBB Group

+* @license http://opensource.org/licenses/gpl-2.0.php GNU General Public License v2

+*

+*/

+

+namespace phpbb\message;

+

+/**

+* Class topic_form

+* Form used to send topics as notification emails

+*

+* @package phpbb\message

+*/

+class topic_form extends form

+{

+ /** @var int */

+ protected $topic_id;

+ /** @var array */

+ protected $topic_row;

+ /** @var string */

+ protected $recipient_address;

+ /** @var string */

+ protected $recipient_name;

+ /** @var string */

+ protected $recipient_lang;

+

+ /**

+ * Get the data of the topic

+ *

+ * @param int $topic_id

+ * @return false|array false if the topic does not exist, array otherwise

+ */

+ protected function get_topic_row($topic_id)

+ {

+ $sql = 'SELECT forum_id, topic_title

+ FROM ' . TOPICS_TABLE . '

+ WHERE topic_id = ' . (int) $topic_id;

+ $result = $this->db->sql_query($sql);

+ $row = $this->db->sql_fetchrow($result);

+ $this->db->sql_freeresult($result);

+

+ return $row;

+ }

+

+ /**

+ * {inheritDoc}

+ */

+ public function check_allow()

+ {

+ $error = parent::check_allow();

+ if ($error)

+ {

+ return $error;

+ }

+

+ if (!$this->auth->acl_get('u_sendemail'))

+ {

+ return 'NO_EMAIL';

+ }

+

+ if (!$this->topic_row)

+ {

+ return 'NO_TOPIC';

+ }

+

+ if (!$this->auth->acl_get('f_read', $this->topic_row['forum_id']))

+ {

+ return 'SORRY_AUTH_READ';

+ }

+

+ if (!$this->auth->acl_get('f_email', $this->topic_row['forum_id']))

+ {

+ return 'NO_EMAIL';

+ }

+

+ return false;

+ }

+

+ /**

+ * {inheritDoc}

+ */

+ public function bind(\phpbb\request\request_interface $request)

+ {

+ parent::bind($request);

+

+ $this->topic_id = $request->variable('t', 0);

+ $this->recipient_address = $request->variable('email', '');

+ $this->recipient_name = $request->variable('name', '', true);

+ $this->recipient_lang = $request->variable('lang', $this->config['default_lang']);

+

+ $this->topic_row = $this->get_topic_row($this->topic_id);

+ }

+

+ /**

+ * {inheritDoc}

+ */

+ public function submit(\messenger $messenger)

+ {

+ if (!$this->recipient_address || !preg_match('/^' . get_preg_expression('email') . '$/i', $this->recipient_address))

+ {

+ $this->errors[] = $this->user->lang['EMPTY_ADDRESS_EMAIL'];

+ }

+

+ if (!$this->recipient_name)

+ {

+ $this->errors[] = $this->user->lang['EMPTY_NAME_EMAIL'];

+ }

+

+ $this->message->set_template('email_notify');

+ $this->message->set_template_vars(array(

+ 'TOPIC_NAME' => htmlspecialchars_decode($this->topic_row['topic_title']),

+ 'U_TOPIC' => generate_board_url() . '/viewtopic.' . $this->phpEx . '?f=' . $this->topic_row['forum_id'] . '&t=' . $this->topic_id,

+ ));

+

+ $this->message->add_recipient(

+ $this->recipient_name,

+ $this->recipient_address,

+ $this->recipient_lang,

+ NOTIFY_EMAIL

+ );

+ $this->message->set_sender_notify_type(NOTIFY_EMAIL);

+

+ parent::submit($messenger);

+ }

+

+ /**

+ * {inheritDoc}

+ */

+ public function get_return_message()

+ {

+ return sprintf($this->user->lang['RETURN_TOPIC'], '<a href="' . append_sid($this->phpbb_root_path . 'viewtopic.' . $this->phpEx, 'f=' . $this->topic_row['forum_id'] . '&amp;t=' . $this->topic_id) . '">', '</a>');

+ }

+

+ /**

+ * {inheritDoc}

+ */

+ public function render(\phpbb\template\template $template)

+ {

+ parent::render($template);

+

+ $this->user->add_lang('viewtopic');

+ $template->assign_vars(array(

+ 'EMAIL' => $this->recipient_address,

+ 'NAME' => $this->recipient_name,

+ 'S_LANG_OPTIONS' => language_select($this->recipient_lang),

+ 'MESSAGE' => $this->body,

+

+ 'L_EMAIL_BODY_EXPLAIN' => $this->user->lang['EMAIL_TOPIC_EXPLAIN'],

+ 'S_POST_ACTION' => append_sid($this->phpbb_root_path . 'memberlist.' . $this->phpEx, 'mode=email&amp;t=' . $this->topic_id))

+ );

+ }

+}

+<?php

+/**

+*

+* @package message

+* @copyright (c) 2014 phpBB Group

+* @license http://opensource.org/licenses/gpl-2.0.php GNU General Public License v2

+*

+*/

+

+namespace phpbb\message;

+

+/**

+* Class user_form

+* Allows users to send emails to other users

+*

+* @package phpbb\message

+*/

+class user_form extends form

+{

+ /** @var int */

+ protected $recipient_id;

+ /** @var array */

+ protected $recipient_row;

+ /** @var string */

+ protected $subject;

+

+ /**

+ * Get the data of the recipient

+ *

+ * @param int $user_id

+ * @return false|array false if the user does not exist, array otherwise

+ */

+ protected function get_user_row($user_id)

+ {

+ $sql = 'SELECT user_id, username, user_colour, user_email, user_allow_viewemail, user_lang, user_jabber, user_notify_type

+ FROM ' . USERS_TABLE . '

+ WHERE user_id = ' . (int) $user_id . '

+ AND user_type IN (' . USER_NORMAL . ', ' . USER_FOUNDER . ')';

+ $result = $this->db->sql_query($sql);

+ $row = $this->db->sql_fetchrow($result);

+ $this->db->sql_freeresult($result);

+

+ return $row;

+ }

+

+ /**

+ * {inheritDoc}

+ */

+ public function check_allow()

+ {

+ $error = parent::check_allow();

+ if ($error)

+ {

+ return $error;

+ }

+

+ if (!$this->auth->acl_get('u_sendemail'))

+ {

+ return 'NO_EMAIL';

+ }

+

+ if ($this->recipient_id == ANONYMOUS || !$this->config['board_email_form'])

+ {

+ return 'NO_EMAIL';

+ }

+

+ if (!$this->recipient_row)

+ {

+ return 'NO_USER';

+ }

+

+ // Can we send email to this user?

+ if (!$this->recipient_row['user_allow_viewemail'] && !$this->auth->acl_get('a_user'))

+ {

+ return 'NO_EMAIL';

+ }

+

+ return false;

+ }

+

+ /**

+ * {inheritDoc}

+ */

+ public function bind(\phpbb\request\request_interface $request)

+ {

+ parent::bind($request);

+

+ $this->recipient_id = $request->variable('u', 0);

+ $this->subject = $request->variable('subject', '', true);

+

+ $this->recipient_row = $this->get_user_row($this->recipient_id);

+ }

+

+ /**

+ * {inheritDoc}

+ */

+ public function submit(\messenger $messenger)

+ {

+ if (!$this->subject)

+ {

+ $this->errors[] = $this->user->lang['EMPTY_SUBJECT_EMAIL'];

+ }

+

+ if (!$this->body)

+ {

+ $this->errors[] = $this->user->lang['EMPTY_MESSAGE_EMAIL'];

+ }

+

+ $this->message->set_template('profile_send_email');

+ $this->message->set_subject($this->subject);

+ $this->message->set_body($this->body);

+ $this->message->add_recipient_from_user_row($this->recipient_row);

+

+ parent::submit($messenger);

+ }

+

+ /**

+ * {inheritDoc}

+ */

+ public function render(\phpbb\template\template $template)

+ {

+ parent::render($template);

+

+ $template->assign_vars(array(

+ 'S_SEND_USER' => true,

+ 'S_POST_ACTION' => append_sid($this->phpbb_root_path . 'memberlist.' . $this->phpEx, 'mode=email&amp;u=' . $this->recipient_id),

+

+ 'L_SEND_EMAIL_USER' => $this->user->lang('SEND_EMAIL_USER', $this->recipient_row['username']),

+ 'USERNAME_FULL' => get_username_string('full', $this->recipient_row['user_id'], $this->recipient_row['username'], $this->recipient_row['user_colour']),

+ 'SUBJECT' => $this->subject,

+ 'MESSAGE' => $this->body,

+ ));

+ }

+}

+

+ /**

+ * @inheritdoc

+ */

+ public function is_legacy()

+ {

+ return false;

+ }

+

+ /**

+ * @inheritdoc

+ */

+ public function get_settings_only($hash, $full = false)

+ {

+ return false;

+ }

+ public function check($password, $hash, $user_row = array())

+<?php

+/**

+*

+* This file is part of the phpBB Forum Software package.

+*

+* @copyright (c) phpBB Limited <https://www.phpbb.com>

+* @license GNU General Public License, version 2 (GPL-2.0)

+*

+* For full copyright and license information, please see

+* the docs/CREDITS.txt file.

+*

+*/

+

+namespace phpbb\passwords\driver;

+

+class bcrypt_wcf2 extends base

+{

+ const PREFIX = '$wcf2$';

+

+ /** @var \phpbb\passwords\driver\bcrypt */

+ protected $bcrypt;

+

+ /** @var phpbb\passwords\driver\helper */

+ protected $helper;

+

+ /**

+ * Constructor of passwords driver object

+ *

+ * @param \phpbb\passwords\driver\bcrypt $bcrypt Salted md5 driver

+ * @param \phpbb\passwords\driver\helper $helper Password driver helper

+ */

+ public function __construct(\phpbb\passwords\driver\bcrypt $bcrypt, helper $helper)

+ {

+ $this->bcrypt = $bcrypt;

+ $this->helper = $helper;

+ }

+

+ /**

+ * @inheritdoc

+ */

+ public function get_prefix()

+ {

+ return self::PREFIX;

+ }

+

+ /**

+ * @inheritdoc

+ */

+ public function is_legacy()

+ {

+ return true;

+ }

+

+ /**

+ * @inheritdoc

+ */

+ public function hash($password, $user_row = '')

+ {

+ // Do not support hashing

+ return false;

+ }

+

+ /**

+ * @inheritdoc

+ */

+ public function check($password, $hash, $user_row = array())

+ {

+ if (empty($hash) || strlen($hash) != 60)

+ {

+ return false;

+ }

+ else

+ {

+ $salt = substr($hash, 0, 29);

+

+ if (strlen($salt) != 29)

+ {

+ return false;

+ }

+ // Works for standard WCF 2.x, i.e. WBB4 and similar

+ return $hash === $this->bcrypt->hash($this->bcrypt->hash($password, $salt), $salt);

+ }

+ }

+}

+<?php

+/**

+*

+* This file is part of the phpBB Forum Software package.

+*

+* @copyright (c) phpBB Limited <https://www.phpbb.com>

+* @license GNU General Public License, version 2 (GPL-2.0)

+*

+* For full copyright and license information, please see

+* the docs/CREDITS.txt file.

+*

+*/

+

+namespace phpbb\passwords\driver;

+

+class convert_password extends base

+{

+ const PREFIX = '$CP$';

+

+ /**

+ * @inheritdoc

+ */

+ public function get_prefix()

+ {

+ return self::PREFIX;

+ }

+

+ /**

+ * @inheritdoc

+ */

+ public function hash($password, $user_row = '')

+ {

+ return false;

+ }

+

+ /**

+ * @inheritdoc

+ */

+ public function check($password, $hash, $user_row = array())

+ {

+ return false;

+ }

+}

+ * Check if hash type is a legacy hash type

+ *

+ * @return bool True if it's a legacy hash type, false if not

+ */

+ public function is_legacy();

+

+ /**

+ * @param string $user_row User's row in users table

+ public function check($password, $hash, $user_row = array());

+<?php

+/**

+*

+* This file is part of the phpBB Forum Software package.

+*

+* @copyright (c) phpBB Limited <https://www.phpbb.com>

+* @license GNU General Public License, version 2 (GPL-2.0)

+*

+* For full copyright and license information, please see

+* the docs/CREDITS.txt file.

+*

+*/

+

+namespace phpbb\passwords\driver;

+

+class md5_mybb extends base

+{

+ const PREFIX = '$md5_mybb$';

+

+ /**

+ * @inheritdoc

+ */

+ public function get_prefix()

+ {

+ return self::PREFIX;

+ }

+

+ /**

+ * @inheritdoc

+ */

+ public function is_legacy()

+ {

+ return true;

+ }

+

+ /**

+ * @inheritdoc

+ */

+ public function hash($password, $user_row = '')

+ {

+ // Do not support hashing

+ return false;

+ }

+

+ /**

+ * @inheritdoc

+ */

+ public function check($password, $hash, $user_row = array())

+ {

+ if (empty($hash) || strlen($hash) != 32 || !isset($user_row['user_passwd_salt']))

+ {

+ return false;

+ }

+ else

+ {

+ // Works for myBB 1.1.x, 1.2.x, 1.4.x, 1.6.x

+ return $hash === md5(md5($user_row['user_passwd_salt']) . md5($password));

+ }

+ }

+}

+<?php

+/**

+*

+* This file is part of the phpBB Forum Software package.

+*

+* @copyright (c) phpBB Limited <https://www.phpbb.com>

+* @license GNU General Public License, version 2 (GPL-2.0)

+*

+* For full copyright and license information, please see

+* the docs/CREDITS.txt file.

+*

+*/

+

+namespace phpbb\passwords\driver;

+

+class md5_phpbb2 extends base

+{

+ const PREFIX = '$md5_phpbb2$';

+

+ /** @var \phpbb\request\request phpBB request object */

+ protected $request;

+

+ /** @var \phpbb\passwords\driver\salted_md5 */

+ protected $salted_md5;

+

+ /** @var phpBB root path */

+ protected $phpbb_root_path;

+

+ /** @var php file extension */

+ protected $php_ext;

+

+ /**

+ * Constructor of passwords driver object

+ *

+ * @param \phpbb\request\request $request phpBB request object

+ * @param \phpbb\passwords\driver\salted_md5 $salted_md5 Salted md5 driver

+ * @param string $phpbb_root_path phpBB root path

+ * @param string $php_ext PHP file extension

+ */

+ public function __construct($request, \phpbb\passwords\driver\salted_md5 $salted_md5, $phpbb_root_path, $php_ext)

+ {

+ $this->request = $request;

+ $this->salted_md5 = $salted_md5;

+ $this->phpbb_root_path = $phpbb_root_path;

+ $this->php_ext = $php_ext;

+ }

+

+ /**

+ * @inheritdoc

+ */

+ public function get_prefix()

+ {

+ return self::PREFIX;

+ }

+

+ /**

+ * @inheritdoc

+ */

+ public function is_legacy()

+ {

+ return true;

+ }

+

+ /**

+ * @inheritdoc

+ */

+ public function hash($password, $user_row = '')

+ {

+ // Do not support hashing

+ return false;

+ }

+

+ /**

+ * @inheritdoc

+ */

+ public function check($password, $hash, $user_row = array())

+ {

+ if (strlen($hash) != 32 && strlen($hash) != 34)

+ {

+ return false;

+ }

+

+ // enable super globals to get literal value

+ // this is needed to prevent unicode normalization

+ $super_globals_disabled = $this->request->super_globals_disabled();

+ if ($super_globals_disabled)

+ {

+ $this->request->enable_super_globals();

+ }

+

+ // in phpBB2 passwords were used exactly as they were sent, with addslashes applied

+ $password_old_format = isset($_REQUEST['password']) ? (string) $_REQUEST['password'] : '';

+ $password_old_format = (!STRIP) ? addslashes($password_old_format) : $password_old_format;

+ $password_new_format = $this->request->variable('password', '', true);

+

+ if ($super_globals_disabled)

+ {

+ $this->request->disable_super_globals();

+ }

+

+ if ($password == $password_new_format)

+ {

+ if (!function_exists('utf8_to_cp1252'))

+ {

+ include($this->phpbb_root_path . 'includes/utf/data/recode_basic.' . $this->php_ext);

+ }

+

+ if (md5($password_old_format) === $hash || md5(\utf8_to_cp1252($password_old_format)) === $hash

+ || $this->salted_md5->check(md5($password_old_format), $hash) === true

+ || $this->salted_md5->check(md5(\utf8_to_cp1252($password_old_format)), $hash) === true)

+ {

+ return true;

+ }

+ }

+

+ return false;

+ }

+}

+<?php

+/**

+*

+* This file is part of the phpBB Forum Software package.

+*

+* @copyright (c) phpBB Limited <https://www.phpbb.com>

+* @license GNU General Public License, version 2 (GPL-2.0)

+*

+* For full copyright and license information, please see

+* the docs/CREDITS.txt file.

+*

+*/

+

+namespace phpbb\passwords\driver;

+

+class md5_vb extends base

+{

+ const PREFIX = '$md5_vb$';

+

+ /**

+ * @inheritdoc

+ */

+ public function get_prefix()

+ {

+ return self::PREFIX;

+ }

+

+ /**

+ * @inheritdoc

+ */

+ public function is_legacy()

+ {

+ return true;

+ }

+

+ /**

+ * @inheritdoc

+ */

+ public function hash($password, $user_row = '')

+ {

+ // Do not support hashing

+ return false;

+ }

+

+ /**

+ * @inheritdoc

+ */

+ public function check($password, $hash, $user_row = array())

+ {

+ if (empty($hash) || strlen($hash) != 32 || !isset($user_row['user_passwd_salt']))

+ {

+ return false;

+ }

+ else

+ {

+ // Works for vB 3.8.x, 4.x.x, 5.0.x

+ return $hash === md5(md5($password) . $user_row['user_passwd_salt']);

+ }

+ }

+}

+ public function is_legacy()

+ {

+ return true;

+ }

+

+ /**

+ * @inheritdoc

+ */

+ public function check($password, $hash, $user_row = array())

+<?php

+/**

+*

+* This file is part of the phpBB Forum Software package.

+*

+* @copyright (c) phpBB Limited <https://www.phpbb.com>

+* @license GNU General Public License, version 2 (GPL-2.0)

+*

+* For full copyright and license information, please see

+* the docs/CREDITS.txt file.

+*

+*/

+

+namespace phpbb\passwords\driver;

+

+class sha1 extends base

+{

+ const PREFIX = '$sha1$';

+

+ /**

+ * @inheritdoc

+ */

+ public function get_prefix()

+ {

+ return self::PREFIX;

+ }

+

+ /**

+ * @inheritdoc

+ */

+ public function is_legacy()

+ {

+ return true;

+ }

+

+ /**

+ * @inheritdoc

+ */

+ public function hash($password, $user_row = '')

+ {

+ // Do not support hashing

+ return false;

+ }

+

+ /**

+ * @inheritdoc

+ */

+ public function check($password, $hash, $user_row = array())

+ {

+ return (strlen($hash) == 40) ? $hash === sha1($password) : false;

+ }

+}

+<?php

+/**

+*

+* This file is part of the phpBB Forum Software package.

+*

+* @copyright (c) phpBB Limited <https://www.phpbb.com>

+* @license GNU General Public License, version 2 (GPL-2.0)

+*

+* For full copyright and license information, please see

+* the docs/CREDITS.txt file.

+*

+*/

+

+namespace phpbb\passwords\driver;

+

+class sha1_smf extends base

+{

+ const PREFIX = '$smf$';

+

+ /**

+ * @inheritdoc

+ */

+ public function get_prefix()

+ {

+ return self::PREFIX;

+ }

+

+ /**

+ * @inheritdoc

+ */

+ public function is_legacy()

+ {

+ return true;

+ }

+

+ /**

+ * @inheritdoc

+ */

+ public function hash($password, $user_row = '')

+ {

+ return (isset($user_row['login_name'])) ? sha1(strtolower($user_row['login_name']) . $password) : false;

+ }

+

+ /**

+ * @inheritdoc

+ */

+ public function check($password, $hash, $user_row = array())

+ {

+ return (strlen($hash) == 40) ? $hash === $this->hash($password, $user_row) : false;

+ }

+}

+<?php

+/**

+*

+* This file is part of the phpBB Forum Software package.

+*

+* @copyright (c) phpBB Limited <https://www.phpbb.com>

+* @license GNU General Public License, version 2 (GPL-2.0)

+*

+* For full copyright and license information, please see

+* the docs/CREDITS.txt file.

+*

+*/

+

+namespace phpbb\passwords\driver;

+

+class sha1_wcf1 extends base

+{

+ const PREFIX = '$wcf1$';

+

+ /**

+ * @inheritdoc

+ */

+ public function get_prefix()

+ {

+ return self::PREFIX;

+ }

+

+ /**

+ * @inheritdoc

+ */

+ public function is_legacy()

+ {

+ return true;

+ }

+

+ /**

+ * @inheritdoc

+ */

+ public function hash($password, $user_row = '')

+ {

+ // Do not support hashing

+ return false;

+ }

+

+ /**

+ * @inheritdoc

+ */

+ public function check($password, $hash, $user_row = array())

+ {

+ if (empty($hash) || strlen($hash) != 40 || !isset($user_row['user_passwd_salt']))

+ {

+ return false;

+ }

+ else

+ {

+ // Works for standard WCF 1.x, i.e. WBB3 and similar

+ return $hash === sha1($user_row['user_passwd_salt'] . sha1($user_row['user_passwd_salt'] . sha1($password)));

+ }

+ }

+}

+<?php

+/**

+*

+* This file is part of the phpBB Forum Software package.

+*

+* @copyright (c) phpBB Limited <https://www.phpbb.com>

+* @license GNU General Public License, version 2 (GPL-2.0)

+*

+* For full copyright and license information, please see

+* the docs/CREDITS.txt file.

+*

+*/

+

+namespace phpbb\passwords\driver;

+

+class sha_xf1 extends base

+{

+ const PREFIX = '$xf1$';

+

+ /**

+ * @inheritdoc

+ */

+ public function get_prefix()

+ {

+ return self::PREFIX;

+ }

+

+ /**

+ * @inheritdoc

+ */

+ public function is_legacy()

+ {

+ return true;

+ }

+

+ /**

+ * @inheritdoc

+ */

+ public function hash($password, $user_row = '')

+ {

+ // Do not support hashing

+ return false;

+ }

+

+ /**

+ * @inheritdoc

+ */

+ public function check($password, $hash, $user_row = array())

+ {

+ if (empty($hash) || (strlen($hash) != 40 && strlen($hash) != 64) || !isset($user_row['user_passwd_salt']))

+ {

+ return false;

+ }

+ else

+ {

+ // Works for xenforo 1.0, 1.1

+ if ($hash === sha1(sha1($password) . $user_row['user_passwd_salt'])

+ || $hash === hash('sha256', hash('sha256', $password) . $user_row['user_passwd_salt']))

+ {

+ return true;

+ }

+ else

+ {

+ return false;

+ }

+ }

+ }

+}

+ return false;

+ * @param array $user_row User's row in users table

+ public function check($password, $hash, $user_row = array())

+ // Empty hashes can't be checked

+ if (empty($hash))

+ {

+ return false;

+ }

+

+ // Still check MD5 hashes as that is what the installer

+ // will default to for the admin user

+ return $this->get_algorithm('$H$')->check($password, $hash);

+ // Check all legacy hash types if prefix is $CP$

+ if ($stored_hash_type->get_prefix() === '$CP$')

+ {

+ // Remove $CP$ prefix for proper checking

+ $hash = substr($hash, 4);

+

+ foreach ($this->type_map as $algorithm)

+ {

+ if ($algorithm->is_legacy() && $algorithm->check($password, $hash, $user_row) === true)

+ {

+ return true;

+ }

+ }

+ }

+

+ $provider_collection = $phpbb_container->get('auth.provider_collection');

+ $provider = $provider_collection->get_provider();

+ $provider_collection = $phpbb_container->get('auth.provider_collection');

+ $provider = $provider_collection->get_provider();

+ $provider_collection = $phpbb_container->get('auth.provider_collection');

+ $provider = $provider_collection->get_provider();

+ if (defined('IN_CHECK_BAN') || defined('SKIP_CHECK_BAN'))

+ global $template, $phpbb_root_path, $phpEx;

+ $contact_link = phpbb_get_board_contact_link($config, $phpbb_root_path, $phpEx);

+ $message = sprintf($this->lang[$message], $till_date, '<a href="' . $contact_link . '">', '</a>');

+ if ($config['board_disable'] && !defined('IN_LOGIN') && !defined('SKIP_CHECK_DISABLED') && !$auth->acl_gets('a_', 'm_') && !$auth->acl_getf_global('m_'))