xdrm-brackets
/
prod-releaser.php
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Dbug

This commit is contained in:
xdrm-brackets 2016-11-08 10:47:01 +01:00
parent c50ad689d3
commit 951bea859a
1 changed files with 15 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
build/api/core/Authentification.php
View File

@ -48,14 +48,18 @@
if( !isset($GLOBALS['TOKEN']) ) if( !isset($GLOBALS['TOKEN']) )
$GLOBALS['TOKEN'] = null; $GLOBALS['TOKEN'] = null;
echo "1. ".$GLOBALS['TOKEN']."\n";
/* (1) Liste des permissions */ /* (1) Liste des permissions */
if( !isset($GLOBALS['PERM']) ) if( !isset($GLOBALS['PERM']) )
$GLOBALS['PERM'] = []; $GLOBALS['PERM'] = [];
echo "2. ".$GLOBALS['TOKEN']."\n";
/* (2) Gestion de AUTH (authentification) dans HEADER /* (2) Gestion de AUTH (authentification) dans HEADER
---------------------------------------------------------*/ ---------------------------------------------------------*/
$GLOBALS['TOKEN'] = isset($_SERVER['PHP_AUTH_DIGEST']) ? $_SERVER['PHP_AUTH_DIGEST'] : ''; $GLOBALS['TOKEN'] = isset($_SERVER['PHP_AUTH_DIGEST']) ? $_SERVER['PHP_AUTH_DIGEST'] : '';
echo "3. ".$GLOBALS['TOKEN']."\n";
/* (3) Gestion de AUTH en fonction du token /* (3) Gestion de AUTH en fonction du token
---------------------------------------------------------*/ ---------------------------------------------------------*/
@ -64,10 +68,13 @@
else else
$GLOBALS['TOKEN'] = null; $GLOBALS['TOKEN'] = null;
echo "4. ".$GLOBALS['TOKEN']."\n";
/* (4) On vérifie l'authentification par BDD /* (4) On vérifie l'authentification par BDD
---------------------------------------------------------*/ ---------------------------------------------------------*/
if( !self::deepCheck() ) if( !self::deepCheck() )
$GLOBALS['TOKEN'] = null; $GLOBALS['TOKEN'] = null;
echo "5. ".$GLOBALS['TOKEN']."\n";
} }
@ -84,7 +91,7 @@
return false; return false;
/* [2] Vérification de l'authentification /* [2] Vérification du système
=========================================================*/ =========================================================*/
/* (1) Fetch cyclic-hashing-system -> check file */ /* (1) Fetch cyclic-hashing-system -> check file */
$fn = __BUILD__.'/api/chs/hash'; $fn = __BUILD__.'/api/chs/hash';
@ -98,21 +105,23 @@
if( strlen($fc) !== 64 ) if( strlen($fc) !== 64 )
return false; return false;
/* (3) Compares content */ /* [3] Hash comparison
=========================================================*/
/* (1) Compares content */
$hashed = self::secure_hash($GLOBALS['TOKEN']); $hashed = self::secure_hash($GLOBALS['TOKEN']);
if( strlen($hashed) !== 64 || $hashed !== $fc ) if( $hashed !== $fc )
return false; return false;
/* (4) Stores new content */ /* (2) Stores new content */
file_put_contents($fn, $GLOBALS['TOKEN']); file_put_contents($fn, $GLOBALS['TOKEN']);
/* (5) Stores permission */ /* (3) Stores permission */
if( !in_array('cyclic-hash', $GLOBALS['PERM']) ) if( !in_array('cyclic-hash', $GLOBALS['PERM']) )
$GLOBALS['PERM'][] = 'cyclic-hash'; $GLOBALS['PERM'][] = 'cyclic-hash';
/* [3] Returns true if no error /* [4] Returns true if no error
=========================================================*/ =========================================================*/
return true; return true;