<?php
// PukiWiki - Yet another WikiWikiWeb clone.
-// $Id: md5.inc.php,v 1.10 2005/03/30 14:27:26 henoheno Exp $
-// MD5 plugin
-
-define('PLUGIN_MD5_LIMIT_LENGTH', 512);
+// $Id: md5.inc.php,v 1.25 2011/01/25 15:01:01 henoheno Exp $
+// Copyright (C) 2001-2006 PukiWiki Developers Team
+// License: GPL v2 or (at your option) any later version
+//
+// MD5 plugin: Allow to convert password/passphrase
+// * PHP sha1() -- If you have sha1() or mhash extension
+// * PHP md5()
+// * PHP crypt()
+// * LDAP SHA / SSHA -- If you have sha1() or mhash extension
+// * LDAP MD5 / SMD5
+// * LDAP CRYPT
+// User interface of pkwk_hash_compute() for system admin
function plugin_md5_action()
{
global $get, $post;
- if (PKWK_SAFE_MODE || PKWK_READONLY) die_message('Prohibited');
+ if (PKWK_SAFE_MODE || PKWK_READONLY) die_message('Prohibited by admin');
// Wait POST
- $key = isset($post['key']) ? $post['key'] : '';
- $submit = isset($post['key']);
- if ($key != '') {
- // Compute (Don't show its $key at the same time)
- $scheme = isset($post['scheme']) ? $post['scheme'] : '';
+ $phrase = isset($post['phrase']) ? $post['phrase'] : '';
+
+ if ($phrase == '') {
+ // Show the form
+
+ // If plugin=md5&md5=password, only set it (Don't compute)
+ $value = isset($get['md5']) ? $get['md5'] : '';
+
+ return array(
+ 'msg' =>'Compute userPassword',
+ 'body'=>plugin_md5_show_form(isset($post['phrase']), $value));
+
+ } else {
+ // Compute (Don't show its $phrase at the same time)
+
$prefix = isset($post['prefix']);
- $body = plugin_md5_compute($scheme, $key, $prefix);
- return array('msg'=>'MD5', 'body'=>$body);
+ $salt = isset($post['salt']) ? $post['salt'] : '';
+
+ // With scheme-prefix or not
+ if (! preg_match('/^\{.+\}.*$/', $salt)) {
+ $scheme = isset($post['scheme']) ? '{' . $post['scheme'] . '}': '';
+ $salt = $scheme . $salt;
+ }
+ return array(
+ 'msg' =>'Result',
+ 'body'=>
+ //($prefix ? 'userPassword: ' : '') .
+ pkwk_hash_compute($phrase, $salt, $prefix, TRUE));
+ }
+}
+
+// $nophrase = Passphrase is (submitted but) empty
+// $value = Default passphrase value
+function plugin_md5_show_form($nophrase = FALSE, $value = '')
+{
+ if (PKWK_SAFE_MODE || PKWK_READONLY) die_message('Prohibited');
+ if (strlen($value) > PKWK_PASSPHRASE_LIMIT_LENGTH)
+ die_message('Limit: malicious message length');
+
+ if ($value != '') $value = 'value="' . htmlsc($value) . '" ';
+
+ $sha1_enabled = function_exists('sha1');
+ $sha1_checked = $md5_checked = '';
+ if ($sha1_enabled) {
+ $sha1_checked = 'checked="checked" ';
} else {
- // If plugin=md4&md5=password, only set it (Don't compute)
- $value = isset($get['md5']) ? $get['md5'] : '';
-
- plugin_md5_checklimit($value);
- if ($value != '') $value = 'value="' . htmlspecialchars($value) . '" ';
- $self = get_script_uri();
- $form = '';
- if ($submit) $form .= '<strong>NO PHRASE</strong><br />';
- $form .= <<<EOD
+ $md5_checked = 'checked="checked" ';
+ }
+
+ $self = get_script_uri();
+
+ $form = <<<EOD
+<p><strong>NOTICE: Don't use this feature via untrustful or unsure network</strong></p>
+<hr>
+EOD;
+
+ if ($nophrase) $form .= '<strong>NO PHRASE</strong><br />';
+
+ $form .= <<<EOD
<form action="$self" method="post">
<div>
<input type="hidden" name="plugin" value="md5" />
<label for="_p_md5_phrase">Phrase:</label>
- <input type="text" name="key" id="_p_md5_phrase" size="60" $value/><br />
+ <input type="text" name="phrase" id="_p_md5_phrase" size="60" $value/><br />
+EOD;
- <input type="radio" name="scheme" id="_p_md5_sha1" value="php_sha1" />
+ if ($sha1_enabled) $form .= <<<EOD
+ <input type="radio" name="scheme" id="_p_md5_sha1" value="x-php-sha1" />
<label for="_p_md5_sha1">PHP sha1()</label><br />
- <input type="radio" name="scheme" id="_p_md5_md5" value="php_md5" checked="checked" />
+EOD;
+
+ $form .= <<<EOD
+ <input type="radio" name="scheme" id="_p_md5_md5" value="x-php-md5" />
<label for="_p_md5_md5">PHP md5()</label><br />
- <input type="radio" name="scheme" id="_p_md5_crpt" value="php_crypt" />
- <label for="_p_md5_crpt">PHP crypt()</label><br />
+ <input type="radio" name="scheme" id="_p_md5_crpt" value="x-php-crypt" />
+ <label for="_p_md5_crpt">PHP crypt() *</label><br />
+EOD;
+
+ if ($sha1_enabled) $form .= <<<EOD
+ <input type="radio" name="scheme" id="_p_md5_lssha" value="SSHA" $sha1_checked/>
+ <label for="_p_md5_lssha">LDAP SSHA (sha-1 with a seed) *</label><br />
+ <input type="radio" name="scheme" id="_p_md5_lsha" value="SHA" />
+ <label for="_p_md5_lsha">LDAP SHA (sha-1)</label><br />
+EOD;
- <input type="radio" name="scheme" id="_p_md5_lsha" value="ldap_sha" />
- <label for="_p_md5_lsha">OpenLDAP SHA (sha1)</label><br />
- <input type="radio" name="scheme" id="_p_md5_lmd5" value="ldap_md5" />
- <label for="_p_md5_lmd5">OpenLDAP MD5</label><br />
+ $form .= <<<EOD
+ <input type="radio" name="scheme" id="_p_md5_lsmd5" value="SMD5" $md5_checked/>
+ <label for="_p_md5_lsmd5">LDAP SMD5 (md5 with a seed) *</label><br />
+ <input type="radio" name="scheme" id="_p_md5_lmd5" value="MD5" />
+ <label for="_p_md5_lmd5">LDAP MD5</label><br />
+
+ <input type="radio" name="scheme" id="_p_md5_lcrpt" value="CRYPT" />
+ <label for="_p_md5_lcrpt">LDAP CRYPT *</label><br />
<input type="checkbox" name="prefix" id="_p_md5_prefix" checked="checked" />
<label for="_p_md5_prefix">Add scheme prefix (RFC2307, Using LDAP as NIS)</label><br />
- <input type="submit" value="Compute" />
+ <label for="_p_md5_salt">Salt, '{scheme}', '{scheme}salt', or userPassword itself to specify:</label><br />
+ <input type="text" name="salt" id="_p_md5_salt" size="60" /><br />
+
+ <input type="submit" value="Compute" /><br />
+
+ <hr>
+ <p>* = Salt enabled<p/>
</div>
</form>
EOD;
- return array('msg'=>'MD5', 'body'=>$form);
- }
-}
-
-// Compute hash with php-functions, or compute like slappasswd (OpenLDAP)
-function plugin_md5_compute($scheme = 'php_md5', $key = '', $prefix = FALSE)
-{
- plugin_md5_checklimit($key);
-
- switch (strtolower($scheme)) {
- case 'x-php-crypt' : /* FALLTHROUGH */
- case 'php_crypt' :
- $hash = ($prefix ? '{x-php-crypt}' : '') . crypt($key); break;
- case 'x-php-md5' : /* FALLTHROUGH */
- case 'php_md5' :
- $hash = ($prefix ? '{x-php-md5}' : '') . md5($key); break;
- case 'x-php-sha1' : /* FALLTHROUGH */
- case 'php_sha1' :
- $hash = ($prefix ? '{x-php-sha1}' : '') . sha1($key); break;
- case 'md5' : /* FALLTHROUGH */
- case 'ldap_md5' :
- $hash = ($prefix ? '{MD5}' : '') . base64_encode(hex2bin(md5($key))); break;
- case 'sha' : /* FALLTHROUGH */
- case 'ldap_sha' :
- $hash = ($prefix ? '{SHA}' : '') . base64_encode(hex2bin(sha1($key))); break;
- default: $hash = ''; break;
- }
-
- return $hash;
-}
-function plugin_md5_checklimit($text)
-{
- if (strlen($text) > PLUGIN_MD5_LIMIT_LENGTH)
- die_message('Limit: malicious message length');
+ return $form;
}
?>
OSDN Git Service
