diff options
Diffstat (limited to 'phpBB/phpbb/passwords/helper.php')
-rw-r--r-- | phpBB/phpbb/passwords/helper.php | 96 |
1 files changed, 4 insertions, 92 deletions
diff --git a/phpBB/phpbb/passwords/helper.php b/phpBB/phpbb/passwords/helper.php index fdf2b6f907..95bad5805f 100644 --- a/phpBB/phpbb/passwords/helper.php +++ b/phpBB/phpbb/passwords/helper.php @@ -15,21 +15,6 @@ namespace phpbb\passwords; class helper { /** - * @var phpbb\passwords\manager - */ - protected $manager; - - /** - * Set the passwords manager instance - * - * @param phpbb\passwords\manager $manager Passwords manager object - */ - public function set_manager(manager $manager) - { - $this->manager = $manager; - } - - /** * Get hash settings from combined hash * * @param string $hash Password hash of combined hash @@ -39,7 +24,7 @@ class helper * password hash or an empty array if hash does not * properly fit the combined hash format */ - protected function get_combined_hash_settings($hash) + public function get_combined_hash_settings($hash) { $output = array(); @@ -57,79 +42,6 @@ class helper } /** - * Create combined hash from already hashed password - * - * @param string $password_hash Complete current password hash - * @param string $type Type of the hashing algorithm the password hash - * should be combined with - * @return string|bool Combined password hash if combined hashing was - * successful, else false - */ - public function combined_hash_password($password_hash, $type) - { - $data = array( - 'prefix' => '$', - 'settings' => '$', - ); - $hash_settings = $this->get_combined_hash_settings($password_hash); - $hash = $hash_settings[0]; - - // Put settings of current hash into data array - $stored_hash_type = $this->manager->detect_algorithm($password_hash); - $this->combine_hash_output($data, 'prefix', $stored_hash_type->get_prefix()); - $this->combine_hash_output($data, 'settings', $stored_hash_type->get_settings_only($password_hash)); - - // Hash current hash with the defined types - foreach ($type as $cur_type) - { - if (isset($this->manager->algorithms[$cur_type])) - { - $new_hash_type = $this->manager->algorithms[$cur_type]; - } - else - { - return false; - } - - $new_hash = $new_hash_type->hash(str_replace($stored_hash_type->get_settings_only($password_hash), '', $hash)); - $this->combine_hash_output($data, 'prefix', $new_hash_type->get_prefix()); - $this->combine_hash_output($data, 'settings', substr(str_replace('$', '\\', $new_hash_type->get_settings_only($new_hash, true)), 0)); - $hash = str_replace($new_hash_type->get_settings_only($new_hash), '', $this->obtain_hash_only($new_hash)); - } - return $this->combine_hash_output($data, 'hash', $hash); - } - - /** - * Check combined password hash against the supplied password - * - * @param string $password Password entered by user - * @param array $stored_hash_type An array containing the hash types - * as described by stored password hash - * @param string $hash Stored password hash - * - * @return bool True if password is correct, false if not - */ - public function check_combined_hash($password, $stored_hash_type, $hash) - { - $i = 0; - $data = array( - 'prefix' => '$', - 'settings' => '$', - ); - $hash_settings = $this->get_combined_hash_settings($hash); - foreach ($stored_hash_type as $key => $hash_type) - { - $rebuilt_hash = $this->rebuild_hash($hash_type->get_prefix(), $hash_settings[$i]); - $this->combine_hash_output($data, 'prefix', $key); - $this->combine_hash_output($data, 'settings', $hash_settings[$i]); - $cur_hash = $hash_type->hash($password, $rebuilt_hash); - $password = str_replace($rebuilt_hash, '', $cur_hash); - $i++; - } - return ($hash === $this->combine_hash_output($data, 'hash', $password)); - } - - /** * Combine hash prefixes, settings, and actual hash * * @param array $data Array containing the keys 'prefix' and 'settings'. @@ -140,7 +52,7 @@ class helper * @return string|null Return complete combined hash if type is neither * 'prefix' nor 'settings', nothing if it is */ - protected function combine_hash_output(&$data, $type, $value) + public function combine_hash_output(&$data, $type, $value) { if ($type == 'prefix') { @@ -167,7 +79,7 @@ class helper * * @return string Rebuilt hash for hashing functions */ - protected function rebuild_hash($prefix, $settings) + public function rebuild_hash($prefix, $settings) { $rebuilt_hash = $prefix; if (strpos($settings, '\\') !== false) @@ -184,7 +96,7 @@ class helper * @param string $hash The full password hash * @return string Actual hash (incl. settings) */ - protected function obtain_hash_only($hash) + public function obtain_hash_only($hash) { return substr($hash, strripos($hash, '$') + 1); } |