ꦫꦣꦺꦤ꧀ꦄꦤ꧀ꦠꦱꦺꦤ

PATH: home / beestk / lpda / classes

<?php
/**
 * 2007-2019 PrestaShop and Contributors
 *
 * NOTICE OF LICENSE
 *
 * This source file is subject to the Open Software License (OSL 3.0)
 * that is bundled with this package in the file LICENSE.txt.
 * It is also available through the world-wide-web at this URL:
 * https://opensource.org/licenses/OSL-3.0
 * If you did not receive a copy of the license and are unable to
 * obtain it through the world-wide-web, please send an email
 * to license@prestashop.com so we can send you a copy immediately.
 *
 * DISCLAIMER
 *
 * Do not edit or add to this file if you wish to upgrade PrestaShop to newer
 * versions in the future. If you wish to customize PrestaShop for your
 * needs please refer to https://www.prestashop.com for more information.
 *
 * @author    PrestaShop SA <contact@prestashop.com>
 * @copyright 2007-2019 PrestaShop SA and Contributors
 * @license   https://opensource.org/licenses/OSL-3.0 Open Software License (OSL 3.0)
 * International Registered Trademark & Property of PrestaShop SA
 */

/**
 * Class PhpEncryption engine for openSSL < 0.9.8.
 *
 * @doc http://php.net/manual/fr/function.mcrypt-encrypt.php#refsect1-function.mcrypt-encrypt-examples
 *
 * This class will be deprecated when web hosting providers will update their version of OpenSSL.
 */
class PhpEncryptionLegacyEngineCore extends PhpEncryptionEngine
{
    protected $key;
    protected $hmacIv;
    protected $iv;
    protected $ivSize;

protected $mode = MCRYPT_MODE_CBC;
    protected $cipher = MCRYPT_RIJNDAEL_128;

/**
     * PhpEncryptionCore constructor.
     *
     * @param string $hexString A string that only contains hexadecimal characters
     *                          Bother upper and lower case are allowed
     */
    public function __construct($hexString)
    {
        $this->key = substr($hexString, 0, 32);
        $this->ivSize = mcrypt_get_iv_size($this->cipher, $this->mode);
        $this->iv = mcrypt_create_iv($this->ivSize, MCRYPT_RAND);
        $this->hmacIv = substr(sha1(_COOKIE_KEY_), 0, $this->ivSize);
    }

/**
     * Encrypt the plaintext.
     *
     * @param string $plaintext Plaintext
     *
     * @return string Cipher text
     */
    public function encrypt($plaintext)
    {
        $blockSize = mcrypt_get_block_size($this->cipher, $this->mode);
        $pad = $blockSize - (strlen($plaintext) % $blockSize);

$cipherText = mcrypt_encrypt(
            $this->cipher,
            $this->key,
            $plaintext . str_repeat(chr($pad), $pad),
            $this->mode,
            $this->iv
        );
        $cipherText = $this->iv . $cipherText;

return $this->generateHmac($cipherText) . ':' . base64_encode($cipherText);
    }

/**
     * Decrypt the cipher text.
     *
     * @param string $cipherText Cipher text
     *
     * @return bool|string Plaintext
     *                     `false` if unable to decrypt
     *
     * @throws Exception
     */
    public function decrypt($cipherText)
    {
        $data = explode(':', $cipherText);
        if (count($data) != 2) {
            return false;
        }

list($hmac, $encrypted) = $data;
        $encrypted = base64_decode($encrypted);
        $newHmac = $this->generateHmac($encrypted);
        if ($hmac !== $newHmac) {
            return false;
        }

$ivDec = substr($encrypted, 0, $this->ivSize);
        $cipherText = substr($encrypted, $this->ivSize);

$data = mcrypt_decrypt(
            $this->cipher,
            $this->key,
            $cipherText,
            $this->mode,
            $ivDec
        );

$pad = ord($data[strlen($data) - 1]);

return substr($data, 0, -$pad);
    }

/**
     * Generate Hmac.
     *
     * @param string $encrypted
     *
     * @return string
     */
    protected function generateHmac($encrypted)
    {
        $macKey = $this->generateKeygenS2k('sha256', $this->key, $this->hmacIv, 32);

return hash_hmac(
            'sha256',
            $this->hmacIv . $this->cipher . $encrypted,
            $macKey
        );
    }

/**
     * Alternative to mhash_keygen_s2k for security reason
     * and php compatibilities.
     *
     * @param string $hash
     * @param string $password
     * @param string $salt
     * @param int $bytes
     *
     * @return string
     */
    protected function generateKeygenS2k($hash, $password, $salt, $bytes)
    {
        $result = '';
        foreach (range(0, ceil($bytes / strlen(hash($hash, null, true))) - 1) as $i) {
            $result .= hash(
                $hash,
                str_repeat("\0", $i) . str_pad(substr($salt, 0, 8), 8, "\0", STR_PAD_RIGHT) . $password,
                true
            );
        }

return substr(
            $result,
            0,
            (int) $bytes
        );
    }
}

[+] ..
[-] Tag.php [open]
[+] proxy
[-] Translate.php [open]
[-] Meta.php [open]
[-] Image.php [open]
[-] Access.php [open]
[+] pdf
[-] Manufacturer.php [open]
[+] log
[-] Country.php [open]
[-] ValidateConstraintTranslator.php [open]
[-] Dispatcher.php [open]
[+] range
[-] DateRange.php [open]
[-] .htaccess [open]
[-] Context.php [open]
[-] PrestaShopBackup.php [open]
[+] shop
[-] Media.php [open]
[-] Pack.php [open]
[-] LocalizationPack.php [open]
[-] RequestSql.php [open]
[-] Windows.php [open]
[-] Uploader.php [open]
[+] db
[-] Search.php [open]
[-] PrestaShopLogger.php [open]
[-] Delivery.php [open]
[-] TranslatedConfiguration.php [open]
[-] Page.php [open]
[-] Profile.php [open]
[+] exception
[-] Curve.php [open]
[-] Connection.php [open]
[+] container
[-] AddressChecksumCore.php [open]
[-] Gender.php [open]
[-] Contact.php [open]
[+] module
[-] Store.php [open]
[-] ProductSupplier.php [open]
[-] PaymentModule.php [open]
[+] tax
[+] cache
[+] assets
[+] form
[-] ProductSale.php [open]
[-] Hook.php [open]
[-] CustomerThread.php [open]
[-] FileUploader.php [open]
[-] QqUploadedFileXhr.php [open]
[-] QuickAccess.php [open]
[+] controller
[-] CMS.php [open]
[-] Mail.php [open]
[-] Carrier.php [open]
[-] Alias.php [open]
[-] ProductPresenterFactory.php [open]
[-] ImageManager.php [open]
[-] Validate.php [open]
[-] Tools.php [open]
[-] Configuration.php [open]
[-] CSV.php [open]
[-] ProductAssembler.php [open]
[-] ConfigurationTest.php [open]
[-] Cookie.php [open]
[-] Zone.php [open]
[-] AddressFormat.php [open]
[+] tree
[-] ProductDownload.php [open]
[-] Link.php [open]
[-] Chart.php [open]
[-] Notification.php [open]
[-] WarehouseAddress.php [open]
[-] Message.php [open]
[-] PhpEncryptionLegacyEngine.php [open]
[-] Language.php [open]
[-] PhpEncryption.php [open]
[+] checkout
[-] Group.php [open]
[-] ManufacturerAddress.php [open]
[-] SpecificPrice.php [open]
[-] Feature.php [open]
[-] Upgrader.php [open]
[-] Customer.php [open]
[-] ObjectModel.php [open]
[-] SpecificPriceRule.php [open]
[+] lang
[-] PrestaShopAutoload.php [open]
[-] CustomerAddress.php [open]
[-] FeatureValue.php [open]
[-] PhpEncryptionEngine.php [open]
[-] Customization.php [open]
[-] PrestaShopCollection.php [open]
[-] CMSRole.php [open]
[-] GroupReduction.php [open]
[-] Cart.php [open]
[-] Attribute.php [open]
[-] Tab.php [open]
[-] Currency.php [open]
[-] index.php [open]
[-] AttributeGroup.php [open]
[-] ConnectionsSource.php [open]
[+] order
[+] webservice
[-] Guest.php [open]
[-] CustomerMessage.php [open]
[-] ImageType.php [open]
[-] State.php [open]
[-] Employee.php [open]
[-] Risk.php [open]
[-] ChecksumInterface.php [open]
[-] Attachment.php [open]
[-] CartRule.php [open]
[-] Product.php [open]
[+] Smarty
[+] stock
[-] Referrer.php [open]
[-] Category.php [open]
[-] QqUploadedFileForm.php [open]
[-] PaymentFree.php [open]
[-] CustomizationField.php [open]
[-] CMSCategory.php [open]
[-] SupplierAddress.php [open]
[-] Combination.php [open]
[-] ConfigurationKPI.php [open]
[-] Address.php [open]
[-] SearchEngine.php [open]
[+] helper
[-] Supplier.php [open]