296 lines
60 KiB
HTML
296 lines
60 KiB
HTML
|
<!DOCTYPE html>
|
||
|
|
<html lang="en">
|
||
|
|
<head>
|
||
|
|
<meta charset="UTF-8">
|
||
|
|
<title>Code Coverage for /var/www/stefproject/manager/sessionManager.php</title>
|
||
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||
|
|
<link href="css/bootstrap.min.css" rel="stylesheet">
|
||
|
|
<link href="css/bootstrap-responsive.min.css" rel="stylesheet">
|
||
|
|
<link href="css/style.css" rel="stylesheet">
|
||
|
|
<!--[if lt IE 9]>
|
||
|
|
<script src="js/html5shiv.js"></script>
|
||
|
|
<![endif]-->
|
||
|
|
</head>
|
||
|
|
<body>
|
||
|
|
<header>
|
||
|
|
<div class="container">
|
||
|
|
<div class="row">
|
||
|
|
<div class="span12">
|
||
|
|
<ul class="breadcrumb">
|
||
|
|
<li><a href="index.html">/var/www/stefproject/manager</a> <span class="divider">/</span></li>
|
||
|
|
<li class="active">sessionManager.php</li>
|
||
|
|
|
||
|
|
</ul>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</header>
|
||
|
|
<div class="container">
|
||
|
|
<table class="table table-bordered">
|
||
|
|
<thead>
|
||
|
|
<tr>
|
||
|
|
<td> </td>
|
||
|
|
<td colspan="10"><div align="center"><strong>Code Coverage</strong></div></td>
|
||
|
|
</tr>
|
||
|
|
<tr>
|
||
|
|
<td> </td>
|
||
|
|
<td colspan="3"><div align="center"><strong>Classes and Traits</strong></div></td>
|
||
|
|
<td colspan="4"><div align="center"><strong>Functions and Methods</strong></div></td>
|
||
|
|
<td colspan="3"><div align="center"><strong>Lines</strong></div></td>
|
||
|
|
</tr>
|
||
|
|
</thead>
|
||
|
|
<tbody>
|
||
|
|
<tr>
|
||
|
|
<td class="success">Total</td>
|
||
|
|
<td class="success big"> <div class="progress progress-success" style="width: 100px;">
|
||
|
|
<div class="bar" style="width: 100.00%;"></div>
|
||
|
|
</div>
|
||
|
|
</td>
|
||
|
|
<td class="success small"><div align="right">100.00%</div></td>
|
||
|
|
<td class="success small"><div align="right">1 / 1</div></td>
|
||
|
|
<td class="success big"> <div class="progress progress-success" style="width: 100px;">
|
||
|
|
<div class="bar" style="width: 100.00%;"></div>
|
||
|
|
</div>
|
||
|
|
</td>
|
||
|
|
<td class="success small"><div align="right">100.00%</div></td>
|
||
|
|
<td class="success small"><div align="right">4 / 4</div></td>
|
||
|
|
<td class="success small"><abbr title="Change Risk Anti-Patterns (CRAP) Index">CRAP</abbr></td>
|
||
|
|
<td class="success big"> <div class="progress progress-success" style="width: 100px;">
|
||
|
|
<div class="bar" style="width: 100.00%;"></div>
|
||
|
|
</div>
|
||
|
|
</td>
|
||
|
|
<td class="success small"><div align="right">100.00%</div></td>
|
||
|
|
<td class="success small"><div align="right">30 / 30</div></td>
|
||
|
|
</tr>
|
||
|
|
|
||
|
|
<tr>
|
||
|
|
<td class="success">sessionManager</td>
|
||
|
|
<td class="success big"> <div class="progress progress-success" style="width: 100px;">
|
||
|
|
<div class="bar" style="width: 100.00%;"></div>
|
||
|
|
</div>
|
||
|
|
</td>
|
||
|
|
<td class="success small"><div align="right">100.00%</div></td>
|
||
|
|
<td class="success small"><div align="right">1 / 1</div></td>
|
||
|
|
<td class="success big"> <div class="progress progress-success" style="width: 100px;">
|
||
|
|
<div class="bar" style="width: 100.00%;"></div>
|
||
|
|
</div>
|
||
|
|
</td>
|
||
|
|
<td class="success small"><div align="right">100.00%</div></td>
|
||
|
|
<td class="success small"><div align="right">4 / 4</div></td>
|
||
|
|
<td class="success small">11</td>
|
||
|
|
<td class="success big"> <div class="progress progress-success" style="width: 100px;">
|
||
|
|
<div class="bar" style="width: 100.00%;"></div>
|
||
|
|
</div>
|
||
|
|
</td>
|
||
|
|
<td class="success small"><div align="right">100.00%</div></td>
|
||
|
|
<td class="success small"><div align="right">30 / 30</div></td>
|
||
|
|
</tr>
|
||
|
|
|
||
|
|
<tr>
|
||
|
|
<td class="success" colspan="4"> <a href="#14">secure_sha1($data)</a></td>
|
||
|
|
<td class="success big"> <div class="progress progress-success" style="width: 100px;">
|
||
|
|
<div class="bar" style="width: 100.00%;"></div>
|
||
|
|
</div>
|
||
|
|
</td>
|
||
|
|
<td class="success small"><div align="right">100.00%</div></td>
|
||
|
|
<td class="success small"><div align="right">1 / 1</div></td>
|
||
|
|
<td class="success small">1</td>
|
||
|
|
<td class="success big"> <div class="progress progress-success" style="width: 100px;">
|
||
|
|
<div class="bar" style="width: 100.00%;"></div>
|
||
|
|
</div>
|
||
|
|
</td>
|
||
|
|
<td class="success small"><div align="right">100.00%</div></td>
|
||
|
|
<td class="success small"><div align="right">1 / 1</div></td>
|
||
|
|
</tr>
|
||
|
|
|
||
|
|
<tr>
|
||
|
|
<td class="success" colspan="4"> <a href="#22">reset_session($session_id=null)</a></td>
|
||
|
|
<td class="success big"> <div class="progress progress-success" style="width: 100px;">
|
||
|
|
<div class="bar" style="width: 100.00%;"></div>
|
||
|
|
</div>
|
||
|
|
</td>
|
||
|
|
<td class="success small"><div align="right">100.00%</div></td>
|
||
|
|
<td class="success small"><div align="right">1 / 1</div></td>
|
||
|
|
<td class="success small">2</td>
|
||
|
|
<td class="success big"> <div class="progress progress-success" style="width: 100px;">
|
||
|
|
<div class="bar" style="width: 100.00%;"></div>
|
||
|
|
</div>
|
||
|
|
</td>
|
||
|
|
<td class="success small"><div align="right">100.00%</div></td>
|
||
|
|
<td class="success small"><div align="right">8 / 8</div></td>
|
||
|
|
</tr>
|
||
|
|
|
||
|
|
<tr>
|
||
|
|
<td class="success" colspan="4"> <a href="#46">update_token()</a></td>
|
||
|
|
<td class="success big"> <div class="progress progress-success" style="width: 100px;">
|
||
|
|
<div class="bar" style="width: 100.00%;"></div>
|
||
|
|
</div>
|
||
|
|
</td>
|
||
|
|
<td class="success small"><div align="right">100.00%</div></td>
|
||
|
|
<td class="success small"><div align="right">1 / 1</div></td>
|
||
|
|
<td class="success small">1</td>
|
||
|
|
<td class="success big"> <div class="progress progress-success" style="width: 100px;">
|
||
|
|
<div class="bar" style="width: 100.00%;"></div>
|
||
|
|
</div>
|
||
|
|
</td>
|
||
|
|
<td class="success small"><div align="right">100.00%</div></td>
|
||
|
|
<td class="success small"><div align="right">5 / 5</div></td>
|
||
|
|
</tr>
|
||
|
|
|
||
|
|
<tr>
|
||
|
|
<td class="success" colspan="4"> <a href="#60">session_start()</a></td>
|
||
|
|
<td class="success big"> <div class="progress progress-success" style="width: 100px;">
|
||
|
|
<div class="bar" style="width: 100.00%;"></div>
|
||
|
|
</div>
|
||
|
|
</td>
|
||
|
|
<td class="success small"><div align="right">100.00%</div></td>
|
||
|
|
<td class="success small"><div align="right">1 / 1</div></td>
|
||
|
|
<td class="success small">7</td>
|
||
|
|
<td class="success big"> <div class="progress progress-success" style="width: 100px;">
|
||
|
|
<div class="bar" style="width: 100.00%;"></div>
|
||
|
|
</div>
|
||
|
|
</td>
|
||
|
|
<td class="success small"><div align="right">100.00%</div></td>
|
||
|
|
<td class="success small"><div align="right">16 / 16</div></td>
|
||
|
|
</tr>
|
||
|
|
|
||
|
|
|
||
|
|
</tbody>
|
||
|
|
</table>
|
||
|
|
<table class="table table-borderless table-condensed">
|
||
|
|
<tbody>
|
||
|
|
<tr><td><div align="right"><a name="1"></a><a href="#1">1</a></div></td><td class="codeLine"><?php</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="2"></a><a href="#2">2</a></div></td><td class="codeLine"></td></tr>
|
||
|
|
<tr><td><div align="right"><a name="3"></a><a href="#3">3</a></div></td><td class="codeLine"> namespace manager;</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="4"></a><a href="#4">4</a></div></td><td class="codeLine"></td></tr>
|
||
|
|
<tr><td><div align="right"><a name="5"></a><a href="#5">5</a></div></td><td class="codeLine"></td></tr>
|
||
|
|
<tr><td><div align="right"><a name="6"></a><a href="#6">6</a></div></td><td class="codeLine"> class sessionManager{</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="7"></a><a href="#7">7</a></div></td><td class="codeLine"></td></tr>
|
||
|
|
<tr><td><div align="right"><a name="8"></a><a href="#8">8</a></div></td><td class="codeLine"> private static $prefix;</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="9"></a><a href="#9">9</a></div></td><td class="codeLine"></td></tr>
|
||
|
|
<tr><td><div align="right"><a name="10"></a><a href="#10">10</a></div></td><td class="codeLine"></td></tr>
|
||
|
|
<tr><td><div align="right"><a name="11"></a><a href="#11">11</a></div></td><td class="codeLine"> /*************************/</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="12"></a><a href="#12">12</a></div></td><td class="codeLine"> /* SECURE SHA1 ALGORITHM */</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="13"></a><a href="#13">13</a></div></td><td class="codeLine"> /*************************/</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="14"></a><a href="#14">14</a></div></td><td class="codeLine"> public static function secure_sha1($data){</td></tr>
|
||
|
|
<tr class="success popin" data-title="14 tests cover line 15" data-content="<ul><li class="success">phpunit\Database_check::testPasswordSizeEqCorrect</li><li class="success">phpunit\Database_check::testPasswordSizeSupIncorrect</li><li class="success">phpunit\sessionManager::testSecureSHA1</li><li class="success">phpunit\sessionManager::testIdSessionUniq</li><li class="success">phpunit\sessionManager::testIdenticalPrefix</li><li class="success">phpunit\sessionManager::testCookieUniq</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIpThenWell</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgentThenWell</li><li class="success">phpunit\sessionManager::testRegeneratedToken</li><li class="success">phpunit\sessionManager::testSamePrefixToken</li></ul>" data-placement="bottom" data-html="true"><td><div align="right"><a name="15"></a><a href="#15">15</a></div></td><td class="codeLine"> return sha1( '">\[..|{@#))'.sha1($data.'_)Q@#((%*_$%(@#') );</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="16"></a><a href="#16">16</a></div></td><td class="codeLine"> }</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="17"></a><a href="#17">17</a></div></td><td class="codeLine"></td></tr>
|
||
|
|
<tr><td><div align="right"><a name="18"></a><a href="#18">18</a></div></td><td class="codeLine"></td></tr>
|
||
|
|
<tr><td><div align="right"><a name="19"></a><a href="#19">19</a></div></td><td class="codeLine"> /*****************************/</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="20"></a><a href="#20">20</a></div></td><td class="codeLine"> /* INITIALISATION DE SESSION */</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="21"></a><a href="#21">21</a></div></td><td class="codeLine"> /*****************************/</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="22"></a><a href="#22">22</a></div></td><td class="codeLine"> private static function reset_session($session_id=null){</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="23"></a><a href="#23">23</a></div></td><td class="codeLine"> // On ferme la session</td></tr>
|
||
|
|
<tr class="success popin" data-title="11 tests cover line 24" data-content="<ul><li class="success">phpunit\sessionManager::testIdSessionUniq</li><li class="success">phpunit\sessionManager::testIdenticalPrefix</li><li class="success">phpunit\sessionManager::testCookieUniq</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIpThenWell</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgentThenWell</li><li class="success">phpunit\sessionManager::testRegeneratedToken</li><li class="success">phpunit\sessionManager::testSamePrefixToken</li></ul>" data-placement="bottom" data-html="true"><td><div align="right"><a name="24"></a><a href="#24">24</a></div></td><td class="codeLine"> session_destroy();</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="25"></a><a href="#25">25</a></div></td><td class="codeLine"></td></tr>
|
||
|
|
<tr><td><div align="right"><a name="26"></a><a href="#26">26</a></div></td><td class="codeLine"> // On definit l'id session si donne en argument</td></tr>
|
||
|
|
<tr class="success popin" data-title="11 tests cover line 27" data-content="<ul><li class="success">phpunit\sessionManager::testIdSessionUniq</li><li class="success">phpunit\sessionManager::testIdenticalPrefix</li><li class="success">phpunit\sessionManager::testCookieUniq</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIpThenWell</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgentThenWell</li><li class="success">phpunit\sessionManager::testRegeneratedToken</li><li class="success">phpunit\sessionManager::testSamePrefixToken</li></ul>" data-placement="bottom" data-html="true"><td><div align="right"><a name="27"></a><a href="#27">27</a></div></td><td class="codeLine"> if( $session_id != null )</td></tr>
|
||
|
|
<tr class="success popin" data-title="11 tests cover line 28" data-content="<ul><li class="success">phpunit\sessionManager::testIdSessionUniq</li><li class="success">phpunit\sessionManager::testIdenticalPrefix</li><li class="success">phpunit\sessionManager::testCookieUniq</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIpThenWell</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgentThenWell</li><li class="success">phpunit\sessionManager::testRegeneratedToken</li><li class="success">phpunit\sessionManager::testSamePrefixToken</li></ul>" data-placement="bottom" data-html="true"><td><div align="right"><a name="28"></a><a href="#28">28</a></div></td><td class="codeLine"> session_id( $session_id );</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="29"></a><a href="#29">29</a></div></td><td class="codeLine"></td></tr>
|
||
|
|
<tr><td><div align="right"><a name="30"></a><a href="#30">30</a></div></td><td class="codeLine"> // Precaution: on met a jour le cookie</td></tr>
|
||
|
|
<tr class="success popin" data-title="11 tests cover line 31" data-content="<ul><li class="success">phpunit\sessionManager::testIdSessionUniq</li><li class="success">phpunit\sessionManager::testIdenticalPrefix</li><li class="success">phpunit\sessionManager::testCookieUniq</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIpThenWell</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgentThenWell</li><li class="success">phpunit\sessionManager::testRegeneratedToken</li><li class="success">phpunit\sessionManager::testSamePrefixToken</li></ul>" data-placement="bottom" data-html="true"><td><div align="right"><a name="31"></a><a href="#31">31</a></div></td><td class="codeLine"> setcookie('PHPSESSID', session_id(), time()+60*30 );</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="32"></a><a href="#32">32</a></div></td><td class="codeLine"></td></tr>
|
||
|
|
<tr><td><div align="right"><a name="33"></a><a href="#33">33</a></div></td><td class="codeLine"> // On redemarre la session avec le bon id session</td></tr>
|
||
|
|
<tr class="success popin" data-title="11 tests cover line 34" data-content="<ul><li class="success">phpunit\sessionManager::testIdSessionUniq</li><li class="success">phpunit\sessionManager::testIdenticalPrefix</li><li class="success">phpunit\sessionManager::testCookieUniq</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIpThenWell</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgentThenWell</li><li class="success">phpunit\sessionManager::testRegeneratedToken</li><li class="success">phpunit\sessionManager::testSamePrefixToken</li></ul>" data-placement="bottom" data-html="true"><td><div align="right"><a name="34"></a><a href="#34">34</a></div></td><td class="codeLine"> \session_start();</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="35"></a><a href="#35">35</a></div></td><td class="codeLine"></td></tr>
|
||
|
|
<tr><td><div align="right"><a name="36"></a><a href="#36">36</a></div></td><td class="codeLine"> // On met a jour le token</td></tr>
|
||
|
|
<tr class="success popin" data-title="11 tests cover line 37" data-content="<ul><li class="success">phpunit\sessionManager::testIdSessionUniq</li><li class="success">phpunit\sessionManager::testIdenticalPrefix</li><li class="success">phpunit\sessionManager::testCookieUniq</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIpThenWell</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgentThenWell</li><li class="success">phpunit\sessionManager::testRegeneratedToken</li><li class="success">phpunit\sessionManager::testSamePrefixToken</li></ul>" data-placement="bottom" data-html="true"><td><div align="right"><a name="37"></a><a href="#37">37</a></div></td><td class="codeLine"> self::update_token();</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="38"></a><a href="#38">38</a></div></td><td class="codeLine"></td></tr>
|
||
|
|
<tr><td><div align="right"><a name="39"></a><a href="#39">39</a></div></td><td class="codeLine"></td></tr>
|
||
|
|
<tr class="success popin" data-title="11 tests cover line 40" data-content="<ul><li class="success">phpunit\sessionManager::testIdSessionUniq</li><li class="success">phpunit\sessionManager::testIdenticalPrefix</li><li class="success">phpunit\sessionManager::testCookieUniq</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIpThenWell</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgentThenWell</li><li class="success">phpunit\sessionManager::testRegeneratedToken</li><li class="success">phpunit\sessionManager::testSamePrefixToken</li></ul>" data-placement="bottom" data-html="true"><td><div align="right"><a name="40"></a><a href="#40">40</a></div></td><td class="codeLine"> header('Refresh: 0');</td></tr>
|
||
|
|
<tr class="success popin" data-title="11 tests cover line 41" data-content="<ul><li class="success">phpunit\sessionManager::testIdSessionUniq</li><li class="success">phpunit\sessionManager::testIdenticalPrefix</li><li class="success">phpunit\sessionManager::testCookieUniq</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIpThenWell</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgentThenWell</li><li class="success">phpunit\sessionManager::testRegeneratedToken</li><li class="success">phpunit\sessionManager::testSamePrefixToken</li></ul>" data-placement="bottom" data-html="true"><td><div align="right"><a name="41"></a><a href="#41">41</a></div></td><td class="codeLine"> }</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="42"></a><a href="#42">42</a></div></td><td class="codeLine"></td></tr>
|
||
|
|
<tr><td><div align="right"><a name="43"></a><a href="#43">43</a></div></td><td class="codeLine"> /*******************/</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="44"></a><a href="#44">44</a></div></td><td class="codeLine"> /* GENERE UN TOKEN */</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="45"></a><a href="#45">45</a></div></td><td class="codeLine"> /*******************/</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="46"></a><a href="#46">46</a></div></td><td class="codeLine"> private static function update_token(){</td></tr>
|
||
|
|
<tr class="success popin" data-title="11 tests cover line 47" data-content="<ul><li class="success">phpunit\sessionManager::testIdSessionUniq</li><li class="success">phpunit\sessionManager::testIdenticalPrefix</li><li class="success">phpunit\sessionManager::testCookieUniq</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIpThenWell</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgentThenWell</li><li class="success">phpunit\sessionManager::testRegeneratedToken</li><li class="success">phpunit\sessionManager::testSamePrefixToken</li></ul>" data-placement="bottom" data-html="true"><td><div align="right"><a name="47"></a><a href="#47">47</a></div></td><td class="codeLine"> $token = self::$prefix.self::secure_sha1(uniqid());</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="48"></a><a href="#48">48</a></div></td><td class="codeLine"></td></tr>
|
||
|
|
<tr><td><div align="right"><a name="49"></a><a href="#49">49</a></div></td><td class="codeLine"> // On definit le token en session</td></tr>
|
||
|
|
<tr class="success popin" data-title="11 tests cover line 50" data-content="<ul><li class="success">phpunit\sessionManager::testIdSessionUniq</li><li class="success">phpunit\sessionManager::testIdenticalPrefix</li><li class="success">phpunit\sessionManager::testCookieUniq</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIpThenWell</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgentThenWell</li><li class="success">phpunit\sessionManager::testRegeneratedToken</li><li class="success">phpunit\sessionManager::testSamePrefixToken</li></ul>" data-placement="bottom" data-html="true"><td><div align="right"><a name="50"></a><a href="#50">50</a></div></td><td class="codeLine"> $_SESSION['session_token'] = $token;</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="51"></a><a href="#51">51</a></div></td><td class="codeLine"></td></tr>
|
||
|
|
<tr><td><div align="right"><a name="52"></a><a href="#52">52</a></div></td><td class="codeLine"> // On definit le token en cookie</td></tr>
|
||
|
|
<tr class="success popin" data-title="11 tests cover line 53" data-content="<ul><li class="success">phpunit\sessionManager::testIdSessionUniq</li><li class="success">phpunit\sessionManager::testIdenticalPrefix</li><li class="success">phpunit\sessionManager::testCookieUniq</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIpThenWell</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgentThenWell</li><li class="success">phpunit\sessionManager::testRegeneratedToken</li><li class="success">phpunit\sessionManager::testSamePrefixToken</li></ul>" data-placement="bottom" data-html="true"><td><div align="right"><a name="53"></a><a href="#53">53</a></div></td><td class="codeLine"> $_COOKIE['session_token'] = $_SESSION['session_token'];</td></tr>
|
||
|
|
<tr class="success popin" data-title="11 tests cover line 54" data-content="<ul><li class="success">phpunit\sessionManager::testIdSessionUniq</li><li class="success">phpunit\sessionManager::testIdenticalPrefix</li><li class="success">phpunit\sessionManager::testCookieUniq</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIpThenWell</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgentThenWell</li><li class="success">phpunit\sessionManager::testRegeneratedToken</li><li class="success">phpunit\sessionManager::testSamePrefixToken</li></ul>" data-placement="bottom" data-html="true"><td><div align="right"><a name="54"></a><a href="#54">54</a></div></td><td class="codeLine"> setcookie('session_token', $_COOKIE['session_token'], time()+60*30 );</td></tr>
|
||
|
|
<tr class="success popin" data-title="11 tests cover line 55" data-content="<ul><li class="success">phpunit\sessionManager::testIdSessionUniq</li><li class="success">phpunit\sessionManager::testIdenticalPrefix</li><li class="success">phpunit\sessionManager::testCookieUniq</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIpThenWell</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgentThenWell</li><li class="success">phpunit\sessionManager::testRegeneratedToken</li><li class="success">phpunit\sessionManager::testSamePrefixToken</li></ul>" data-placement="bottom" data-html="true"><td><div align="right"><a name="55"></a><a href="#55">55</a></div></td><td class="codeLine"> }</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="56"></a><a href="#56">56</a></div></td><td class="codeLine"></td></tr>
|
||
|
|
<tr><td><div align="right"><a name="57"></a><a href="#57">57</a></div></td><td class="codeLine"> /************/</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="58"></a><a href="#58">58</a></div></td><td class="codeLine"> /* AMORCEUR */</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="59"></a><a href="#59">59</a></div></td><td class="codeLine"> /************/</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="60"></a><a href="#60">60</a></div></td><td class="codeLine"> public static function session_start(){</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="61"></a><a href="#61">61</a></div></td><td class="codeLine"> /* [1] Génération et Gestion des donnees a utiliser</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="62"></a><a href="#62">62</a></div></td><td class="codeLine"> ==============================================================*/</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="63"></a><a href="#63">63</a></div></td><td class="codeLine"> // On genere le hash a partir des donnees personnelles</td></tr>
|
||
|
|
<tr class="success popin" data-title="11 tests cover line 64" data-content="<ul><li class="success">phpunit\sessionManager::testIdSessionUniq</li><li class="success">phpunit\sessionManager::testIdenticalPrefix</li><li class="success">phpunit\sessionManager::testCookieUniq</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIpThenWell</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgentThenWell</li><li class="success">phpunit\sessionManager::testRegeneratedToken</li><li class="success">phpunit\sessionManager::testSamePrefixToken</li></ul>" data-placement="bottom" data-html="true"><td><div align="right"><a name="64"></a><a href="#64">64</a></div></td><td class="codeLine"> self::$prefix = self::secure_sha1( $_SERVER['REMOTE_ADDR'].$_SERVER['HTTP_USER_AGENT'] );</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="65"></a><a href="#65">65</a></div></td><td class="codeLine"></td></tr>
|
||
|
|
<tr><td><div align="right"><a name="66"></a><a href="#66">66</a></div></td><td class="codeLine"> // On cree un id session associe a ces donnees personnelles</td></tr>
|
||
|
|
<tr class="success popin" data-title="11 tests cover line 67" data-content="<ul><li class="success">phpunit\sessionManager::testIdSessionUniq</li><li class="success">phpunit\sessionManager::testIdenticalPrefix</li><li class="success">phpunit\sessionManager::testCookieUniq</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIpThenWell</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgentThenWell</li><li class="success">phpunit\sessionManager::testRegeneratedToken</li><li class="success">phpunit\sessionManager::testSamePrefixToken</li></ul>" data-placement="bottom" data-html="true"><td><div align="right"><a name="67"></a><a href="#67">67</a></div></td><td class="codeLine"> $sessid = substr(self::$prefix,0,5) . substr(self::secure_sha1(uniqid()),0,24);</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="68"></a><a href="#68">68</a></div></td><td class="codeLine"></td></tr>
|
||
|
|
<tr><td><div align="right"><a name="69"></a><a href="#69">69</a></div></td><td class="codeLine"> // On genere un token pour l'execution suivante</td></tr>
|
||
|
|
<tr class="success popin" data-title="11 tests cover line 70" data-content="<ul><li class="success">phpunit\sessionManager::testIdSessionUniq</li><li class="success">phpunit\sessionManager::testIdenticalPrefix</li><li class="success">phpunit\sessionManager::testCookieUniq</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIpThenWell</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgentThenWell</li><li class="success">phpunit\sessionManager::testRegeneratedToken</li><li class="success">phpunit\sessionManager::testSamePrefixToken</li></ul>" data-placement="bottom" data-html="true"><td><div align="right"><a name="70"></a><a href="#70">70</a></div></td><td class="codeLine"> $token = self::$prefix.self::secure_sha1(uniqid());</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="71"></a><a href="#71">71</a></div></td><td class="codeLine"></td></tr>
|
||
|
|
<tr><td><div align="right"><a name="72"></a><a href="#72">72</a></div></td><td class="codeLine"> // On definit/recupere le token</td></tr>
|
||
|
|
<tr class="success popin" data-title="11 tests cover line 73" data-content="<ul><li class="success">phpunit\sessionManager::testIdSessionUniq</li><li class="success">phpunit\sessionManager::testIdenticalPrefix</li><li class="success">phpunit\sessionManager::testCookieUniq</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIpThenWell</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgentThenWell</li><li class="success">phpunit\sessionManager::testRegeneratedToken</li><li class="success">phpunit\sessionManager::testSamePrefixToken</li></ul>" data-placement="bottom" data-html="true"><td><div align="right"><a name="73"></a><a href="#73">73</a></div></td><td class="codeLine"> $session_token = (isset($_COOKIE['session_token'])) ? $_COOKIE['session_token'] : null;</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="74"></a><a href="#74">74</a></div></td><td class="codeLine"></td></tr>
|
||
|
|
<tr><td><div align="right"><a name="75"></a><a href="#75">75</a></div></td><td class="codeLine"></td></tr>
|
||
|
|
<tr><td><div align="right"><a name="76"></a><a href="#76">76</a></div></td><td class="codeLine"></td></tr>
|
||
|
|
<tr><td><div align="right"><a name="77"></a><a href="#77">77</a></div></td><td class="codeLine"> /* [2] Verification de l'id session</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="78"></a><a href="#78">78</a></div></td><td class="codeLine"> ==============================================================*/</td></tr>
|
||
|
|
<tr class="success popin" data-title="11 tests cover line 79" data-content="<ul><li class="success">phpunit\sessionManager::testIdSessionUniq</li><li class="success">phpunit\sessionManager::testIdenticalPrefix</li><li class="success">phpunit\sessionManager::testCookieUniq</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIpThenWell</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgentThenWell</li><li class="success">phpunit\sessionManager::testRegeneratedToken</li><li class="success">phpunit\sessionManager::testSamePrefixToken</li></ul>" data-placement="bottom" data-html="true"><td><div align="right"><a name="79"></a><a href="#79">79</a></div></td><td class="codeLine"> \session_start();</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="80"></a><a href="#80">80</a></div></td><td class="codeLine"></td></tr>
|
||
|
|
<tr><td><div align="right"><a name="81"></a><a href="#81">81</a></div></td><td class="codeLine"> // On verifie l'id session (5 premiers chars du hash des donnees perso)</td></tr>
|
||
|
|
<tr class="success popin" data-title="11 tests cover line 82" data-content="<ul><li class="success">phpunit\sessionManager::testIdSessionUniq</li><li class="success">phpunit\sessionManager::testIdenticalPrefix</li><li class="success">phpunit\sessionManager::testCookieUniq</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIpThenWell</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgentThenWell</li><li class="success">phpunit\sessionManager::testRegeneratedToken</li><li class="success">phpunit\sessionManager::testSamePrefixToken</li></ul>" data-placement="bottom" data-html="true"><td><div align="right"><a name="82"></a><a href="#82">82</a></div></td><td class="codeLine"> $valid_sessid = strpos( session_id(), substr(self::$prefix,0,5) ) === 0;</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="83"></a><a href="#83">83</a></div></td><td class="codeLine"></td></tr>
|
||
|
|
<tr><td><div align="right"><a name="84"></a><a href="#84">84</a></div></td><td class="codeLine"> // Si id session incorrect ou pas de token</td></tr>
|
||
|
|
<tr class="success popin" data-title="11 tests cover line 85" data-content="<ul><li class="success">phpunit\sessionManager::testIdSessionUniq</li><li class="success">phpunit\sessionManager::testIdenticalPrefix</li><li class="success">phpunit\sessionManager::testCookieUniq</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIpThenWell</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgentThenWell</li><li class="success">phpunit\sessionManager::testRegeneratedToken</li><li class="success">phpunit\sessionManager::testSamePrefixToken</li></ul>" data-placement="bottom" data-html="true"><td><div align="right"><a name="85"></a><a href="#85">85</a></div></td><td class="codeLine"> if( !$valid_sessid )</td></tr>
|
||
|
|
<tr class="success popin" data-title="11 tests cover line 86" data-content="<ul><li class="success">phpunit\sessionManager::testIdSessionUniq</li><li class="success">phpunit\sessionManager::testIdenticalPrefix</li><li class="success">phpunit\sessionManager::testCookieUniq</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIpThenWell</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgentThenWell</li><li class="success">phpunit\sessionManager::testRegeneratedToken</li><li class="success">phpunit\sessionManager::testSamePrefixToken</li></ul>" data-placement="bottom" data-html="true"><td><div align="right"><a name="86"></a><a href="#86">86</a></div></td><td class="codeLine"> self::reset_session( $sessid ); // On initialise la session (bon id session)</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="87"></a><a href="#87">87</a></div></td><td class="codeLine"></td></tr>
|
||
|
|
<tr><td><div align="right"><a name="88"></a><a href="#88">88</a></div></td><td class="codeLine"></td></tr>
|
||
|
|
<tr><td><div align="right"><a name="89"></a><a href="#89">89</a></div></td><td class="codeLine"> // si id session invalide</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="90"></a><a href="#90">90</a></div></td><td class="codeLine"></td></tr>
|
||
|
|
<tr><td><div align="right"><a name="91"></a><a href="#91">91</a></div></td><td class="codeLine"></td></tr>
|
||
|
|
<tr><td><div align="right"><a name="92"></a><a href="#92">92</a></div></td><td class="codeLine"> /* [3] Verification du token</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="93"></a><a href="#93">93</a></div></td><td class="codeLine"> ==============================================================*/</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="94"></a><a href="#94">94</a></div></td><td class="codeLine"> // On verifie que le token est valide</td></tr>
|
||
|
|
<tr class="success popin" data-title="11 tests cover line 95" data-content="<ul><li class="success">phpunit\sessionManager::testIdSessionUniq</li><li class="success">phpunit\sessionManager::testIdenticalPrefix</li><li class="success">phpunit\sessionManager::testCookieUniq</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIpThenWell</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgentThenWell</li><li class="success">phpunit\sessionManager::testRegeneratedToken</li><li class="success">phpunit\sessionManager::testSamePrefixToken</li></ul>" data-placement="bottom" data-html="true"><td><div align="right"><a name="95"></a><a href="#95">95</a></div></td><td class="codeLine"> $valid_token = $session_token != null; // verification de l'existence du cookie</td></tr>
|
||
|
|
<tr class="success popin" data-title="11 tests cover line 96" data-content="<ul><li class="success">phpunit\sessionManager::testIdSessionUniq</li><li class="success">phpunit\sessionManager::testIdenticalPrefix</li><li class="success">phpunit\sessionManager::testCookieUniq</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIpThenWell</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgentThenWell</li><li class="success">phpunit\sessionManager::testRegeneratedToken</li><li class="success">phpunit\sessionManager::testSamePrefixToken</li></ul>" data-placement="bottom" data-html="true"><td><div align="right"><a name="96"></a><a href="#96">96</a></div></td><td class="codeLine"> $valid_token = $valid_token && strpos($session_token, self::$prefix) === 0; // verification des donnes personnelles</td></tr>
|
||
|
|
<tr class="success popin" data-title="11 tests cover line 97" data-content="<ul><li class="success">phpunit\sessionManager::testIdSessionUniq</li><li class="success">phpunit\sessionManager::testIdenticalPrefix</li><li class="success">phpunit\sessionManager::testCookieUniq</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIpThenWell</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgentThenWell</li><li class="success">phpunit\sessionManager::testRegeneratedToken</li><li class="success">phpunit\sessionManager::testSamePrefixToken</li></ul>" data-placement="bottom" data-html="true"><td><div align="right"><a name="97"></a><a href="#97">97</a></div></td><td class="codeLine"> $valid_token = $valid_token && isset($_SESSION['session_token']); // verification que la variable session associee existe</td></tr>
|
||
|
|
<tr class="success popin" data-title="11 tests cover line 98" data-content="<ul><li class="success">phpunit\sessionManager::testIdSessionUniq</li><li class="success">phpunit\sessionManager::testIdenticalPrefix</li><li class="success">phpunit\sessionManager::testCookieUniq</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIpThenWell</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgentThenWell</li><li class="success">phpunit\sessionManager::testRegeneratedToken</li><li class="success">phpunit\sessionManager::testSamePrefixToken</li></ul>" data-placement="bottom" data-html="true"><td><div align="right"><a name="98"></a><a href="#98">98</a></div></td><td class="codeLine"> $valid_token = $valid_token && $_SESSION['session_token'] == $_COOKIE['session_token']; // verification que la session est coherente</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="99"></a><a href="#99">99</a></div></td><td class="codeLine"></td></tr>
|
||
|
|
<tr><td><div align="right"><a name="100"></a><a href="#100">100</a></div></td><td class="codeLine"> /* [4] Si token inexistant</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="101"></a><a href="#101">101</a></div></td><td class="codeLine"> ==============================================================*/</td></tr>
|
||
|
|
<tr class="success popin" data-title="11 tests cover line 102" data-content="<ul><li class="success">phpunit\sessionManager::testIdSessionUniq</li><li class="success">phpunit\sessionManager::testIdenticalPrefix</li><li class="success">phpunit\sessionManager::testCookieUniq</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIpThenWell</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgentThenWell</li><li class="success">phpunit\sessionManager::testRegeneratedToken</li><li class="success">phpunit\sessionManager::testSamePrefixToken</li></ul>" data-placement="bottom" data-html="true"><td><div align="right"><a name="102"></a><a href="#102">102</a></div></td><td class="codeLine"> if( !$valid_token )</td></tr>
|
||
|
|
<tr class="success popin" data-title="11 tests cover line 103" data-content="<ul><li class="success">phpunit\sessionManager::testIdSessionUniq</li><li class="success">phpunit\sessionManager::testIdenticalPrefix</li><li class="success">phpunit\sessionManager::testCookieUniq</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIpThenWell</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgentThenWell</li><li class="success">phpunit\sessionManager::testRegeneratedToken</li><li class="success">phpunit\sessionManager::testSamePrefixToken</li></ul>" data-placement="bottom" data-html="true"><td><div align="right"><a name="103"></a><a href="#103">103</a></div></td><td class="codeLine"> self::reset_session($sessid); // On initialise la session</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="104"></a><a href="#104">104</a></div></td><td class="codeLine"> else</td></tr>
|
||
|
|
<tr class="success popin" data-title="5 tests cover line 105" data-content="<ul><li class="success">phpunit\sessionManager::testIdSessionUniq</li><li class="success">phpunit\sessionManager::testIdenticalPrefix</li><li class="success">phpunit\sessionManager::testCookieUniq</li><li class="success">phpunit\sessionManager::testRegeneratedToken</li><li class="success">phpunit\sessionManager::testSamePrefixToken</li></ul>" data-placement="bottom" data-html="true"><td><div align="right"><a name="105"></a><a href="#105">105</a></div></td><td class="codeLine"> self::update_token(); // Dans tous les cas, on cree un nouveau token</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="106"></a><a href="#106">106</a></div></td><td class="codeLine"></td></tr>
|
||
|
|
<tr><td><div align="right"><a name="107"></a><a href="#107">107</a></div></td><td class="codeLine"></td></tr>
|
||
|
|
<tr class="success popin" data-title="11 tests cover line 108" data-content="<ul><li class="success">phpunit\sessionManager::testIdSessionUniq</li><li class="success">phpunit\sessionManager::testIdenticalPrefix</li><li class="success">phpunit\sessionManager::testCookieUniq</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIp</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongIpThenWell</li><li class="success">phpunit\sessionManager::testSessionIdTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgent</li><li class="success">phpunit\sessionManager::testSessionTokenTheftWithWrongUserAgentThenWell</li><li class="success">phpunit\sessionManager::testRegeneratedToken</li><li class="success">phpunit\sessionManager::testSamePrefixToken</li></ul>" data-placement="bottom" data-html="true"><td><div align="right"><a name="108"></a><a href="#108">108</a></div></td><td class="codeLine"> }</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="109"></a><a href="#109">109</a></div></td><td class="codeLine"></td></tr>
|
||
|
|
<tr><td><div align="right"><a name="110"></a><a href="#110">110</a></div></td><td class="codeLine"></td></tr>
|
||
|
|
<tr><td><div align="right"><a name="111"></a><a href="#111">111</a></div></td><td class="codeLine"> }</td></tr>
|
||
|
|
<tr><td><div align="right"><a name="112"></a><a href="#112">112</a></div></td><td class="codeLine"></td></tr>
|
||
|
|
<tr><td><div align="right"><a name="113"></a><a href="#113">113</a></div></td><td class="codeLine"></td></tr>
|
||
|
|
<tr><td><div align="right"><a name="114"></a><a href="#114">114</a></div></td><td class="codeLine">?></td></tr>
|
||
|
|
|
||
|
|
</tbody>
|
||
|
|
</table>
|
||
|
|
<footer>
|
||
|
|
<h4>Legend</h4>
|
||
|
|
<p>
|
||
|
|
<span class="success"><strong>Executed</strong></span>
|
||
|
|
<span class="danger"><strong>Not Executed</strong></span>
|
||
|
|
<span class="warning"><strong>Dead Code</strong></span>
|
||
|
|
</p>
|
||
|
|
<p>
|
||
|
|
<small>Generated by <a href="http://github.com/sebastianbergmann/php-code-coverage" target="_top">PHP_CodeCoverage 1.2.13</a> using <a href="http://www.php.net/" target="_top">PHP 5.5.9-1ubuntu4.14</a> and <a href="http://phpunit.de/">PHPUnit 3.7.28</a> at Sun Feb 14 13:13:13 CET 2016.</small>
|
||
|
|
</p>
|
||
|
|
</footer>
|
||
|
|
</div>
|
||
|
|
<script src="js/jquery.min.js" type="text/javascript"></script>
|
||
|
|
<script src="js/bootstrap.min.js" type="text/javascript"></script>
|
||
|
|
<script type="text/javascript">$('.popin').popover({trigger: 'hover'});</script>
|
||
|
|
</body>
|
||
|
|
</html>
|