first commit

libraries/joomla/crypt/password/simple.php

@@ -0,0 +1,190 @@
+<?php
+/**
+ * @package     Joomla.Platform
+ * @subpackage  Crypt
+ *
+ * @copyright   Copyright (C) 2005 - 2013 Open Source Matters, Inc. All rights reserved.
+ * @license     GNU General Public License version 2 or later; see LICENSE
+ */
+
+defined('JPATH_PLATFORM') or die;
+
+/**
+ * Joomla Platform Password Crypter
+ *
+ * @package     Joomla.Platform
+ * @subpackage  Crypt
+ * @since       12.2
+ */
+class JCryptPasswordSimple implements JCryptPassword
+{
+	/**
+	 * @var    integer  The cost parameter for hashing algorithms.
+	 * @since  12.2
+	 */
+	protected $cost = 10;
+
+	/**
+	 * @var    string   The default hash type
+	 * @since  12.3
+	 */
+	protected $defaultType = '$2y$';
+
+	/**
+	 * Creates a password hash
+	 *
+	 * @param   string  $password  The password to hash.
+	 * @param   string  $type      The hash type.
+	 *
+	 * @return  string  The hashed password.
+	 *
+	 * @since   12.2
+	 * @throws  InvalidArgumentException
+	 */
+	public function create($password, $type = null)
+	{
+		if (empty($type))
+		{
+			$type = $this->defaultType;
+		}
+
+		switch ($type)
+		{
+			case '$2a$':
+			case JCryptPassword::BLOWFISH:
+				if (version_compare(PHP_VERSION, '5.3.7') >= 0)
+				{
+					$type = '$2y$';
+				}
+				else
+				{
+					$type = '$2a$';
+				}
+
+				$salt = $type . str_pad($this->cost, 2, '0', STR_PAD_LEFT) . '$' . $this->getSalt(22);
+
+				return crypt($password, $salt);
+
+			case JCryptPassword::MD5:
+				$salt = $this->getSalt(12);
+
+				$salt = '$1$' . $salt;
+
+				return crypt($password, $salt);
+
+			case JCryptPassword::JOOMLA:
+				$salt = $this->getSalt(32);
+
+				return md5($password . $salt) . ':' . $salt;
+
+			default:
+				throw new InvalidArgumentException(sprintf('Hash type %s is not supported', $type));
+				break;
+		}
+	}
+
+	/**
+	 * Sets the cost parameter for the generated hash for algorithms that use a cost factor.
+	 *
+	 * @param   integer  $cost  The new cost value.
+	 *
+	 * @return  void
+	 *
+	 * @since   12.2
+	 */
+	public function setCost($cost)
+	{
+		$this->cost = $cost;
+	}
+
+	/**
+	 * Generates a salt of specified length. The salt consists of characters in the set [./0-9A-Za-z].
+	 *
+	 * @param   integer  $length  The number of characters to return.
+	 *
+	 * @return  string  The string of random characters.
+	 *
+	 * @since   12.2
+	 */
+	protected function getSalt($length)
+	{
+		$bytes = ceil($length * 6 / 8);
+
+		$randomData = str_replace('+', '.', base64_encode(JCrypt::genRandomBytes($bytes)));
+
+		return substr($randomData, 0, $length);
+	}
+
+	/**
+	 * Verifies a password hash
+	 *
+	 * @param   string  $password  The password to verify.
+	 * @param   string  $hash      The password hash to check.
+	 *
+	 * @return  boolean  True if the password is valid, false otherwise.
+	 *
+	 * @since   12.2
+	 */
+	public function verify($password, $hash)
+	{
+		// Check if the hash is a blowfish hash.
+		if (substr($hash, 0, 4) == '$2a$' || substr($hash, 0, 4) == '$2y$')
+		{
+			if (version_compare(PHP_VERSION, '5.3.7') >= 0)
+			{
+				$type = '$2y$';
+			}
+			else
+			{
+				$type = '$2a$';
+			}
+
+			$hash = $type . substr($hash, 4);
+
+			return (crypt($password, $hash) === $hash);
+		}
+
+		// Check if the hash is an MD5 hash.
+		if (substr($hash, 0, 3) == '$1$')
+		{
+			return (crypt($password, $hash) === $hash);
+		}
+
+		// Check if the hash is a Joomla hash.
+		if (preg_match('#[a-z0-9]{32}:[A-Za-z0-9]{32}#', $hash) === 1)
+		{
+			return md5($password . substr($hash, 33)) == substr($hash, 0, 32);
+		}
+
+		return false;
+	}
+
+	/**
+	 * Sets a default type
+	 *
+	 * @param   string  $type  The value to set as default.
+	 *
+	 * @return  void
+	 *
+	 * @since   12.3
+	 */
+	public function setDefaultType($type)
+	{
+		if (!empty($type))
+		{
+			$this->defaultType = $type;
+		}
+	}
+
+	/**
+	 * Gets the default type
+	 *
+	 * @return   string  $type  The default type
+	 *
+	 * @since   12.3
+	 */
+	public function getDefaultType()
+	{
+		return $this->defaultType;
+	}
+}