191 lines
3.7 KiB
PHP
191 lines
3.7 KiB
PHP
<?php
|
|
/**
|
|
* @package Joomla.Platform
|
|
* @subpackage Crypt
|
|
*
|
|
* @copyright Copyright (C) 2005 - 2013 Open Source Matters, Inc. All rights reserved.
|
|
* @license GNU General Public License version 2 or later; see LICENSE
|
|
*/
|
|
|
|
defined('JPATH_PLATFORM') or die;
|
|
|
|
/**
|
|
* Joomla Platform Password Crypter
|
|
*
|
|
* @package Joomla.Platform
|
|
* @subpackage Crypt
|
|
* @since 12.2
|
|
*/
|
|
class JCryptPasswordSimple implements JCryptPassword
|
|
{
|
|
/**
|
|
* @var integer The cost parameter for hashing algorithms.
|
|
* @since 12.2
|
|
*/
|
|
protected $cost = 10;
|
|
|
|
/**
|
|
* @var string The default hash type
|
|
* @since 12.3
|
|
*/
|
|
protected $defaultType = '$2y$';
|
|
|
|
/**
|
|
* Creates a password hash
|
|
*
|
|
* @param string $password The password to hash.
|
|
* @param string $type The hash type.
|
|
*
|
|
* @return string The hashed password.
|
|
*
|
|
* @since 12.2
|
|
* @throws InvalidArgumentException
|
|
*/
|
|
public function create($password, $type = null)
|
|
{
|
|
if (empty($type))
|
|
{
|
|
$type = $this->defaultType;
|
|
}
|
|
|
|
switch ($type)
|
|
{
|
|
case '$2a$':
|
|
case JCryptPassword::BLOWFISH:
|
|
if (version_compare(PHP_VERSION, '5.3.7') >= 0)
|
|
{
|
|
$type = '$2y$';
|
|
}
|
|
else
|
|
{
|
|
$type = '$2a$';
|
|
}
|
|
|
|
$salt = $type . str_pad($this->cost, 2, '0', STR_PAD_LEFT) . '$' . $this->getSalt(22);
|
|
|
|
return crypt($password, $salt);
|
|
|
|
case JCryptPassword::MD5:
|
|
$salt = $this->getSalt(12);
|
|
|
|
$salt = '$1$' . $salt;
|
|
|
|
return crypt($password, $salt);
|
|
|
|
case JCryptPassword::JOOMLA:
|
|
$salt = $this->getSalt(32);
|
|
|
|
return md5($password . $salt) . ':' . $salt;
|
|
|
|
default:
|
|
throw new InvalidArgumentException(sprintf('Hash type %s is not supported', $type));
|
|
break;
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Sets the cost parameter for the generated hash for algorithms that use a cost factor.
|
|
*
|
|
* @param integer $cost The new cost value.
|
|
*
|
|
* @return void
|
|
*
|
|
* @since 12.2
|
|
*/
|
|
public function setCost($cost)
|
|
{
|
|
$this->cost = $cost;
|
|
}
|
|
|
|
/**
|
|
* Generates a salt of specified length. The salt consists of characters in the set [./0-9A-Za-z].
|
|
*
|
|
* @param integer $length The number of characters to return.
|
|
*
|
|
* @return string The string of random characters.
|
|
*
|
|
* @since 12.2
|
|
*/
|
|
protected function getSalt($length)
|
|
{
|
|
$bytes = ceil($length * 6 / 8);
|
|
|
|
$randomData = str_replace('+', '.', base64_encode(JCrypt::genRandomBytes($bytes)));
|
|
|
|
return substr($randomData, 0, $length);
|
|
}
|
|
|
|
/**
|
|
* Verifies a password hash
|
|
*
|
|
* @param string $password The password to verify.
|
|
* @param string $hash The password hash to check.
|
|
*
|
|
* @return boolean True if the password is valid, false otherwise.
|
|
*
|
|
* @since 12.2
|
|
*/
|
|
public function verify($password, $hash)
|
|
{
|
|
// Check if the hash is a blowfish hash.
|
|
if (substr($hash, 0, 4) == '$2a$' || substr($hash, 0, 4) == '$2y$')
|
|
{
|
|
if (version_compare(PHP_VERSION, '5.3.7') >= 0)
|
|
{
|
|
$type = '$2y$';
|
|
}
|
|
else
|
|
{
|
|
$type = '$2a$';
|
|
}
|
|
|
|
$hash = $type . substr($hash, 4);
|
|
|
|
return (crypt($password, $hash) === $hash);
|
|
}
|
|
|
|
// Check if the hash is an MD5 hash.
|
|
if (substr($hash, 0, 3) == '$1$')
|
|
{
|
|
return (crypt($password, $hash) === $hash);
|
|
}
|
|
|
|
// Check if the hash is a Joomla hash.
|
|
if (preg_match('#[a-z0-9]{32}:[A-Za-z0-9]{32}#', $hash) === 1)
|
|
{
|
|
return md5($password . substr($hash, 33)) == substr($hash, 0, 32);
|
|
}
|
|
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* Sets a default type
|
|
*
|
|
* @param string $type The value to set as default.
|
|
*
|
|
* @return void
|
|
*
|
|
* @since 12.3
|
|
*/
|
|
public function setDefaultType($type)
|
|
{
|
|
if (!empty($type))
|
|
{
|
|
$this->defaultType = $type;
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Gets the default type
|
|
*
|
|
* @return string $type The default type
|
|
*
|
|
* @since 12.3
|
|
*/
|
|
public function getDefaultType()
|
|
{
|
|
return $this->defaultType;
|
|
}
|
|
}
|