This commit is contained in:
xdrm-brackets 2016-11-08 10:48:37 +01:00
parent 951bea859a
commit fbc25483eb
1 changed files with 6 additions and 10 deletions

View File

@ -48,33 +48,25 @@
if( !isset($GLOBALS['TOKEN']) ) if( !isset($GLOBALS['TOKEN']) )
$GLOBALS['TOKEN'] = null; $GLOBALS['TOKEN'] = null;
echo "1. ".$GLOBALS['TOKEN']."\n";
/* (1) Liste des permissions */ /* (1) Liste des permissions */
if( !isset($GLOBALS['PERM']) ) if( !isset($GLOBALS['PERM']) )
$GLOBALS['PERM'] = []; $GLOBALS['PERM'] = [];
echo "2. ".$GLOBALS['TOKEN']."\n";
/* (2) Gestion de AUTH (authentification) dans HEADER /* (2) Gestion de AUTH (authentification) dans HEADER
---------------------------------------------------------*/ ---------------------------------------------------------*/
$GLOBALS['TOKEN'] = isset($_SERVER['PHP_AUTH_DIGEST']) ? $_SERVER['PHP_AUTH_DIGEST'] : ''; $GLOBALS['TOKEN'] = isset($_SERVER['PHP_AUTH_DIGEST']) ? $_SERVER['PHP_AUTH_DIGEST'] : '';
echo "3. ".$GLOBALS['TOKEN']."\n";
/* (3) Gestion de AUTH en fonction du token /* (3) Gestion de AUTH en fonction du token
---------------------------------------------------------*/ ---------------------------------------------------------*/
if( preg_match('/^[a-f0-9]{64}$/', $GLOBALS['TOKEN'], $match) ) $GLOBALS['TOKEN'] = preg_match('/^[a-f0-9]{64}$/', $GLOBALS['TOKEN'], $match) ? $match[0] : null;
$GLOBALS['TOKEN'] = $match[0];
else
$GLOBALS['TOKEN'] = null;
echo "4. ".$GLOBALS['TOKEN']."\n"; echo "regexp- ".$GLOBALS['TOKEN']."\n";
/* (4) On vérifie l'authentification par BDD /* (4) On vérifie l'authentification par BDD
---------------------------------------------------------*/ ---------------------------------------------------------*/
if( !self::deepCheck() ) if( !self::deepCheck() )
$GLOBALS['TOKEN'] = null; $GLOBALS['TOKEN'] = null;
echo "5. ".$GLOBALS['TOKEN']."\n";
} }
@ -90,6 +82,7 @@
if( is_null($GLOBALS['TOKEN']) ) if( is_null($GLOBALS['TOKEN']) )
return false; return false;
echo 'a';
/* [2] Vérification du système /* [2] Vérification du système
=========================================================*/ =========================================================*/
@ -98,12 +91,14 @@
if( !is_file($fn) ) if( !is_file($fn) )
return false; return false;
echo 'b';
/* (2) Read file -> check content */ /* (2) Read file -> check content */
$fc = file_get_contents($fn); $fc = file_get_contents($fn);
if( strlen($fc) !== 64 ) if( strlen($fc) !== 64 )
return false; return false;
echo 'c';
/* [3] Hash comparison /* [3] Hash comparison
=========================================================*/ =========================================================*/
@ -112,6 +107,7 @@
if( $hashed !== $fc ) if( $hashed !== $fc )
return false; return false;
echo 'd';
/* (2) Stores new content */ /* (2) Stores new content */
file_put_contents($fn, $GLOBALS['TOKEN']); file_put_contents($fn, $GLOBALS['TOKEN']);