Browse Source

implement one time passwords using TOTP

Andrew Dolgov 7 years ago
parent
commit
fb70f26ed9
100 changed files with 3825 additions and 3 deletions
  1. 43 1
      classes/auth/internal.php
  2. 84 1
      classes/pref/prefs.php
  3. 1 1
      include/functions.php
  4. 20 0
      lib/otphp/LICENCE
  5. 74 0
      lib/otphp/lib/hotp.php
  6. 120 0
      lib/otphp/lib/otp.php
  7. 27 0
      lib/otphp/lib/otphp.php
  8. 106 0
      lib/otphp/lib/totp.php
  9. 83 0
      lib/otphp/vendor/base32.php
  10. 26 0
      lib/otphp/vendor/libs.php
  11. 38 0
      lib/phpqrcode/CHANGELOG
  12. 67 0
      lib/phpqrcode/INSTALL
  13. 165 0
      lib/phpqrcode/LICENSE
  14. 45 0
      lib/phpqrcode/README
  15. 2 0
      lib/phpqrcode/VERSION
  16. 2875 0
      lib/phpqrcode/bindings/tcpdf/qrcode.php
  17. 2 0
      lib/phpqrcode/cache/frame_1.dat
  18. BIN
      lib/phpqrcode/cache/frame_1.png
  19. BIN
      lib/phpqrcode/cache/frame_10.dat
  20. BIN
      lib/phpqrcode/cache/frame_10.png
  21. BIN
      lib/phpqrcode/cache/frame_11.dat
  22. BIN
      lib/phpqrcode/cache/frame_11.png
  23. BIN
      lib/phpqrcode/cache/frame_12.dat
  24. BIN
      lib/phpqrcode/cache/frame_12.png
  25. BIN
      lib/phpqrcode/cache/frame_13.dat
  26. BIN
      lib/phpqrcode/cache/frame_13.png
  27. BIN
      lib/phpqrcode/cache/frame_14.dat
  28. BIN
      lib/phpqrcode/cache/frame_14.png
  29. BIN
      lib/phpqrcode/cache/frame_15.dat
  30. BIN
      lib/phpqrcode/cache/frame_15.png
  31. 1 0
      lib/phpqrcode/cache/frame_16.dat
  32. BIN
      lib/phpqrcode/cache/frame_16.png
  33. BIN
      lib/phpqrcode/cache/frame_17.dat
  34. BIN
      lib/phpqrcode/cache/frame_17.png
  35. 2 0
      lib/phpqrcode/cache/frame_18.dat
  36. BIN
      lib/phpqrcode/cache/frame_18.png
  37. 3 0
      lib/phpqrcode/cache/frame_19.dat
  38. BIN
      lib/phpqrcode/cache/frame_19.png
  39. 1 0
      lib/phpqrcode/cache/frame_2.dat
  40. BIN
      lib/phpqrcode/cache/frame_2.png
  41. BIN
      lib/phpqrcode/cache/frame_20.dat
  42. BIN
      lib/phpqrcode/cache/frame_20.png
  43. 1 0
      lib/phpqrcode/cache/frame_21.dat
  44. BIN
      lib/phpqrcode/cache/frame_21.png
  45. 3 0
      lib/phpqrcode/cache/frame_22.dat
  46. BIN
      lib/phpqrcode/cache/frame_22.png
  47. 3 0
      lib/phpqrcode/cache/frame_23.dat
  48. BIN
      lib/phpqrcode/cache/frame_23.png
  49. 1 0
      lib/phpqrcode/cache/frame_24.dat
  50. BIN
      lib/phpqrcode/cache/frame_24.png
  51. 3 0
      lib/phpqrcode/cache/frame_25.dat
  52. BIN
      lib/phpqrcode/cache/frame_25.png
  53. 2 0
      lib/phpqrcode/cache/frame_26.dat
  54. BIN
      lib/phpqrcode/cache/frame_26.png
  55. BIN
      lib/phpqrcode/cache/frame_27.dat
  56. BIN
      lib/phpqrcode/cache/frame_27.png
  57. BIN
      lib/phpqrcode/cache/frame_28.dat
  58. BIN
      lib/phpqrcode/cache/frame_28.png
  59. 2 0
      lib/phpqrcode/cache/frame_29.dat
  60. BIN
      lib/phpqrcode/cache/frame_29.png
  61. 1 0
      lib/phpqrcode/cache/frame_3.dat
  62. BIN
      lib/phpqrcode/cache/frame_3.png
  63. BIN
      lib/phpqrcode/cache/frame_30.dat
  64. BIN
      lib/phpqrcode/cache/frame_30.png
  65. 1 0
      lib/phpqrcode/cache/frame_31.dat
  66. BIN
      lib/phpqrcode/cache/frame_31.png
  67. 2 0
      lib/phpqrcode/cache/frame_32.dat
  68. BIN
      lib/phpqrcode/cache/frame_32.png
  69. 14 0
      lib/phpqrcode/cache/frame_33.dat
  70. BIN
      lib/phpqrcode/cache/frame_33.png
  71. BIN
      lib/phpqrcode/cache/frame_34.dat
  72. BIN
      lib/phpqrcode/cache/frame_34.png
  73. BIN
      lib/phpqrcode/cache/frame_35.dat
  74. BIN
      lib/phpqrcode/cache/frame_35.png
  75. BIN
      lib/phpqrcode/cache/frame_36.dat
  76. BIN
      lib/phpqrcode/cache/frame_36.png
  77. BIN
      lib/phpqrcode/cache/frame_37.dat
  78. BIN
      lib/phpqrcode/cache/frame_37.png
  79. 1 0
      lib/phpqrcode/cache/frame_38.dat
  80. BIN
      lib/phpqrcode/cache/frame_38.png
  81. BIN
      lib/phpqrcode/cache/frame_39.dat
  82. BIN
      lib/phpqrcode/cache/frame_39.png
  83. 1 0
      lib/phpqrcode/cache/frame_4.dat
  84. BIN
      lib/phpqrcode/cache/frame_4.png
  85. 2 0
      lib/phpqrcode/cache/frame_40.dat
  86. BIN
      lib/phpqrcode/cache/frame_40.png
  87. 1 0
      lib/phpqrcode/cache/frame_5.dat
  88. BIN
      lib/phpqrcode/cache/frame_5.png
  89. BIN
      lib/phpqrcode/cache/frame_6.dat
  90. BIN
      lib/phpqrcode/cache/frame_6.png
  91. BIN
      lib/phpqrcode/cache/frame_7.dat
  92. BIN
      lib/phpqrcode/cache/frame_7.png
  93. BIN
      lib/phpqrcode/cache/frame_8.dat
  94. BIN
      lib/phpqrcode/cache/frame_8.png
  95. BIN
      lib/phpqrcode/cache/frame_9.dat
  96. BIN
      lib/phpqrcode/cache/frame_9.png
  97. BIN
      lib/phpqrcode/cache/mask_0/mask_101_0.dat
  98. BIN
      lib/phpqrcode/cache/mask_0/mask_105_0.dat
  99. 2 0
      lib/phpqrcode/cache/mask_0/mask_109_0.dat
  100. 0 0
      lib/phpqrcode/cache/mask_0/mask_113_0.dat

+ 43 - 1
classes/auth/internal.php

@@ -6,6 +6,48 @@ class Auth_Internal extends Auth_Base {
 		$pwd_hash1 = encrypt_password($password);
 		$pwd_hash2 = encrypt_password($password, $login);
 		$login = db_escape_string($login);
+		$otp = db_escape_string($_REQUEST["otp"]);
+
+		if (get_schema_version($this->link) > 96) {
+			$result = db_query($this->link, "SELECT otp_enabled,salt FROM ttrss_users WHERE
+				login = '$login'");
+
+			require_once "lib/otphp/vendor/base32.php";
+			require_once "lib/otphp/lib/otp.php";
+			require_once "lib/otphp/lib/totp.php";
+
+			$base32 = new Base32();
+
+			$otp_enabled = sql_bool_to_bool(db_fetch_result($result, 0, "otp_enabled"));
+			$secret = $base32->encode(sha1(db_fetch_result($result, 0, "salt")));
+
+			$topt = new \OTPHP\TOTP($secret);
+			$otp_check = $topt->now();
+
+			if ($otp_enabled) {
+				if ($otp) {
+					if ($otp != $otp_check) {
+						return false;
+					}
+				} else {
+					?><html>
+						<head><title>Tiny Tiny RSS</title></head>
+					<body>
+					<form method="POST">
+						<input type="hidden" name="login_action" value="do_login">
+						<input type="hidden" name="login" value="<?php echo htmlspecialchars($login) ?>">
+						<input type="hidden" name="password" value="<?php echo htmlspecialchars($password) ?>">
+
+						<label><?php echo __("Please enter your one time password:") ?></label>
+						<input type="password" size="6" name="otp"/>
+						<input type="submit" value="Continue"/>
+					</form>
+					</form>
+					<?php
+					exit;
+				}
+			}
+		}
 
 		if (get_schema_version($this->link) > 87) {
 
@@ -104,7 +146,7 @@ class Auth_Internal extends Auth_Base {
 			$new_password_hash = encrypt_password($new_password, $new_salt, true);
 
 			db_query($this->link, "UPDATE ttrss_users SET
-				pwd_hash = '$new_password_hash', salt = '$new_salt'
+				pwd_hash = '$new_password_hash', salt = '$new_salt', otp_enabled = false
 					WHERE id = '$owner_uid'");
 
 			$_SESSION["pwd_hash"] = $new_password_hash;

+ 84 - 1
classes/pref/prefs.php

@@ -154,12 +154,15 @@ class Pref_Prefs extends Handler_Protected {
 
 		print "<table width=\"100%\" class=\"prefPrefsList\">";
 
-		$result = db_query($this->link, "SELECT email,full_name,
+		print "<h2>" . __("Personal data") . "</h2>";
+
+		$result = db_query($this->link, "SELECT email,full_name,otp_enabled,
 			access_level FROM ttrss_users
 			WHERE id = ".$_SESSION["uid"]);
 
 		$email = htmlspecialchars(db_fetch_result($result, 0, "email"));
 		$full_name = htmlspecialchars(db_fetch_result($result, 0, "full_name"));
+		$otp_enabled = sql_bool_to_bool(db_fetch_result($result, 0, "otp_enabled"));
 
 		print "<tr><td width=\"40%\">".__('Full name')."</td>";
 		print "<td class=\"prefValue\"><input dojoType=\"dijit.form.ValidationTextBox\" name=\"full_name\" required=\"1\"
@@ -194,6 +197,8 @@ class Pref_Prefs extends Handler_Protected {
 
 		if ($authenticator && method_exists($authenticator, "change_password")) {
 
+			print "<h2>" . __("Password") . "</h2>";
+
 			$result = db_query($this->link, "SELECT id FROM ttrss_users
 				WHERE id = ".$_SESSION["uid"]." AND pwd_hash
 				= 'SHA1:5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8'");
@@ -249,6 +254,55 @@ class Pref_Prefs extends Handler_Protected {
 
 			print "</form>";
 
+			if ($_SESSION["auth_module"] == "internal") {
+
+				print "<h2>" . __("One time passwords / Authenticator") . "</h2>";
+
+				if ($otp_enabled) {
+
+					print "<p>".__("One time passwords are currently enabled. Change your current password and refresh this page to reconfigure.") . "</p>";
+
+				} else {
+
+					print "<p>".__("You will need a compatible Authenticator to use this. Changing your password would automatically disable OTP.") . "</p>";
+
+					print "<p>".__("Scan the following code by the Authenticator application:")."</p>";
+
+					$csrf_token = $_SESSION["csrf_token"];
+
+					print "<img src=\"backend.php?op=pref-prefs&method=otpqrcode&csrf_token=$csrf_token\">";
+
+					print "<form dojoType=\"dijit.form.Form\" id=\"changeOtpForm\">";
+
+					print "<input dojoType=\"dijit.form.TextBox\" style=\"display : none\" name=\"op\" value=\"pref-prefs\">";
+					print "<input dojoType=\"dijit.form.TextBox\" style=\"display : none\" name=\"method\" value=\"changeotp\">";
+
+					print "<script type=\"dojo/method\" event=\"onSubmit\" args=\"evt\">
+					evt.preventDefault();
+					if (this.validate()) {
+						notify_progress('Saving data...', true);
+
+						new Ajax.Request('backend.php', {
+							parameters: dojo.objectToQuery(this.getValues()),
+							onComplete: function(transport) {
+								window.location.reload();
+						} });
+
+					}
+					</script>";
+
+					print "<input dojoType=\"dijit.form.CheckBox\" required=\"1\"
+						type=\"checkbox\" id=\"enable_otp\" name=\"enable_otp\"/> ";
+					print "<label for=\"enable_otp\">".__("I have scanned the code and would like to enable OTP")."</label>";
+
+					print "<p><button dojoType=\"dijit.form.Button\" type=\"submit\">".
+						__("Save OTP setting")."</button>";
+
+					print "</form>";
+
+				}
+
+			}
 		}
 
 		print "</div>"; #pane
@@ -571,5 +625,34 @@ class Pref_Prefs extends Handler_Protected {
 	function toggleAdvanced() {
 		$_SESSION["prefs_show_advanced"] = !$_SESSION["prefs_show_advanced"];
 	}
+
+	function otpqrcode() {
+		require_once "lib/otphp/vendor/base32.php";
+		require_once "lib/otphp/lib/otp.php";
+		require_once "lib/otphp/lib/totp.php";
+		require_once "lib/phpqrcode/phpqrcode.php";
+
+		$result = db_query($this->link, "SELECT login,salt
+			FROM ttrss_users
+			WHERE id = ".$_SESSION["uid"]);
+
+		$base32 = new Base32();
+
+		$login = db_fetch_result($result, 0, "login");
+		$secret = $base32->encode(sha1(db_fetch_result($result, 0, "salt")));
+
+		$topt = new \OTPHP\TOTP($secret);
+
+		print QRcode::png($topt->provisioning_uri($login));
+	}
+
+	function changeotp() {
+		$enable_otp = $_REQUEST["enable_otp"];
+
+		if ($enable_otp == "on") {
+			db_query($this->link, "UPDATE ttrss_users SET otp_enabled = true WHERE
+				id = " . $_SESSION["uid"]);
+		}
+	}
 }
 ?>

+ 1 - 1
include/functions.php

@@ -1,6 +1,6 @@
 <?php
 	define('EXPECTED_CONFIG_VERSION', 26);
-	define('SCHEMA_VERSION', 96);
+	define('SCHEMA_VERSION', 97);
 
 	$fetch_last_error = false;
 

+ 20 - 0
lib/otphp/LICENCE

@@ -0,0 +1,20 @@
+Copyright (c) 2011 Le Lag 
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+

+ 74 - 0
lib/otphp/lib/hotp.php

@@ -0,0 +1,74 @@
+<?php
+/*
+ * Copyright (c) 2011 Le Lag 
+ * Permission is hereby granted, free of charge, to any person obtaining a copy
+ * of this software and associated documentation files (the "Software"), to deal
+ * in the Software without restriction, including without limitation the rights
+ * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+ * copies of the Software, and to permit persons to whom the Software is
+ * furnished to do so, subject to the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be included in
+ * all copies or substantial portions of the Software.
+
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+ * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+ * THE SOFTWARE.
+ */
+
+namespace OTPHP {
+  /**
+   * HOTP - One time password generator 
+   * 
+   * The HOTP class allow for the generation 
+   * and verification of one-time password using 
+   * the HOTP specified algorithm.
+   *
+   * This class is meant to be compatible with 
+   * Google Authenticator
+   *
+   * This class was originally ported from the rotp
+   * ruby library available at https://github.com/mdp/rotp
+   */
+  class HOTP extends OTP {
+    /**
+     *  Get the password for a specific counter value
+     *  @param integer $count the counter which is used to
+     *  seed the hmac hash function.
+     *  @return integer the One Time Password
+     */
+    public function at($count) {
+      return $this->generateOTP($count);
+    }
+
+
+    /**
+     * Verify if a password is valid for a specific counter value
+     *
+     * @param integer $otp the one-time password 
+     * @param integer $counter the counter value
+     * @return  bool true if the counter is valid, false otherwise
+     */
+    public function verify($otp, $counter) {
+      return ($otp == $this->at($counter));
+    }
+
+    /**
+     * Returns the uri for a specific secret for hotp method.
+     * Can be encoded as a image for simple configuration in 
+     * Google Authenticator.
+     *
+     * @param string $name the name of the account / profile
+     * @param integer $initial_count the initial counter 
+     * @return string the uri for the hmac secret
+     */
+    public function provisioning_uri($name, $initial_count) {
+      return "otpauth://hotp/".urlencode($name)."?secret={$this->secret}&counter=$initial_count";
+    }
+  }
+
+}

+ 120 - 0
lib/otphp/lib/otp.php

@@ -0,0 +1,120 @@
+<?php
+/*
+ * Copyright (c) 2011 Le Lag 
+ * Permission is hereby granted, free of charge, to any person obtaining a copy
+ * of this software and associated documentation files (the "Software"), to deal
+ * in the Software without restriction, including without limitation the rights
+ * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+ * copies of the Software, and to permit persons to whom the Software is
+ * furnished to do so, subject to the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be included in
+ * all copies or substantial portions of the Software.
+
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+ * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+ * THE SOFTWARE.
+ */
+
+namespace OTPHP {
+/**
+ * One Time Password Generator 
+ * 
+ * The OTP class allow the generation of one-time
+ * password that is described in rfc 4xxx.
+ * 
+ * This is class is meant to be compatible with 
+ * Google Authenticator.
+ *
+ * This class was originally ported from the rotp
+ * ruby library available at https://github.com/mdp/rotp
+ */
+class OTP {
+    /**
+     * The base32 encoded secret key
+     * @var string
+     */
+    public $secret;
+
+    /**
+     * The algorithm used for the hmac hash function
+     * @var string
+     */
+    public $digest;
+
+    /**
+     * The number of digits in the one-time password
+     * @var integer
+     */ 
+    public $digits;
+
+    /**
+     * Constructor for the OTP class
+     * @param string $secret the secret key
+     * @param array $opt options array can contain the
+     * following keys :
+     *   @param integer digits : the number of digits in the one time password
+     *   Currently Google Authenticator only support 6. Defaults to 6.
+     *   @param string digest : the algorithm used for the hmac hash function
+     *   Google Authenticator only support sha1. Defaults to sha1
+     *
+     * @return new OTP class.
+     */
+    public function __construct($secret, $opt = Array()) {
+      $this->digits = isset($opt['digits']) ? $opt['digits'] : 6;
+      $this->digest = isset($opt['digest']) ? $opt['digest'] : 'sha1';
+      $this->secret = $secret;
+    }
+
+    /**
+     * Generate a one-time password
+     *
+     * @param integer $input : number used to seed the hmac hash function.
+     * This number is usually a counter (HOTP) or calculated based on the current
+     * timestamp (see TOTP class).
+     * @return integer the one-time password 
+     */
+    public function generateOTP($input) {
+      $hash = hash_hmac($this->digest, $this->intToBytestring($input), $this->byteSecret());
+      foreach(str_split($hash, 2) as $hex) { // stupid PHP has bin2hex but no hex2bin WTF
+        $hmac[] = hexdec($hex);
+      }
+      $offset = $hmac[19] & 0xf;
+      $code = ($hmac[$offset+0] & 0x7F) << 24 |
+        ($hmac[$offset + 1] & 0xFF) << 16 |
+        ($hmac[$offset + 2] & 0xFF) << 8 |
+        ($hmac[$offset + 3] & 0xFF);
+      return $code % pow(10, $this->digits);
+    }
+
+    /**
+     * Returns the binary value of the base32 encoded secret
+     * @access private
+     * This method should be private but was left public for
+     * phpunit tests to work.
+     * @return binary secret key
+     */
+    public function byteSecret() {
+      return \Base32::decode($this->secret);
+    }
+
+    /**
+     * Turns an integer in a OATH bytestring
+     * @param integer $int
+     * @access private
+     * @return string bytestring
+     */
+    public function intToBytestring($int) {
+      $result = Array();
+      while($int != 0) {
+        $result[] = chr($int & 0xFF);
+        $int >>= 8;
+      }
+      return str_pad(join(array_reverse($result)), 8, "\000", STR_PAD_LEFT);
+    }
+  }
+}

+ 27 - 0
lib/otphp/lib/otphp.php

@@ -0,0 +1,27 @@
+<?php
+/*
+ * Copyright (c) 2011 Le Lag 
+ * Permission is hereby granted, free of charge, to any person obtaining a copy
+ * of this software and associated documentation files (the "Software"), to deal
+ * in the Software without restriction, including without limitation the rights
+ * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+ * copies of the Software, and to permit persons to whom the Software is
+ * furnished to do so, subject to the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be included in
+ * all copies or substantial portions of the Software.
+
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+ * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+ * THE SOFTWARE.
+ */
+
+require_once dirname(__FILE__).'/../vendor/libs.php';
+require_once dirname(__FILE__).'/otp.php';
+require_once dirname(__FILE__).'/hotp.php';
+require_once dirname(__FILE__).'/totp.php';
+

+ 106 - 0
lib/otphp/lib/totp.php

@@ -0,0 +1,106 @@
+<?php
+/*
+ * Copyright (c) 2011 Le Lag 
+ * Permission is hereby granted, free of charge, to any person obtaining a copy
+ * of this software and associated documentation files (the "Software"), to deal
+ * in the Software without restriction, including without limitation the rights
+ * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+ * copies of the Software, and to permit persons to whom the Software is
+ * furnished to do so, subject to the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be included in
+ * all copies or substantial portions of the Software.
+
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+ * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+ * THE SOFTWARE.
+ */
+
+namespace OTPHP {
+  /**
+   * TOTP - One time password generator 
+   * 
+   * The TOTP class allow for the generation 
+   * and verification of one-time password using 
+   * the TOTP specified algorithm.
+   *
+   * This class is meant to be compatible with 
+   * Google Authenticator
+   *
+   * This class was originally ported from the rotp
+   * ruby library available at https://github.com/mdp/rotp
+   */
+  class TOTP extends OTP {
+    /**
+     * The interval in seconds for a one-time password timeframe
+     * Defaults to 30
+     * @var integer
+     */
+    public $interval;
+
+    public function __construct($s, $opt = Array()) {
+      $this->interval = isset($opt['interval']) ? $opt['interval'] : 30;
+      parent::__construct($s, $opt);
+    }
+
+    /**
+     *  Get the password for a specific timestamp value 
+     *
+     *  @param integer $timestamp the timestamp which is timecoded and 
+     *  used to seed the hmac hash function.
+     *  @return integer the One Time Password
+     */
+    public function at($timestamp) {
+      return $this->generateOTP($this->timecode($timestamp));
+    }
+
+    /**
+     *  Get the password for the current timestamp value 
+     *
+     *  @return integer the current One Time Password
+     */
+    public function now() {
+      return $this->generateOTP($this->timecode(time()));
+    }
+
+    /**
+     * Verify if a password is valid for a specific counter value
+     *
+     * @param integer $otp the one-time password 
+     * @param integer $timestamp the timestamp for the a given time, defaults to current time.
+     * @return  bool true if the counter is valid, false otherwise
+     */
+    public function verify($otp, $timestamp = null) {
+      if($timestamp === null)
+        $timestamp = time();
+      return ($otp == $this->at($timestamp));
+    }
+
+    /**
+     * Returns the uri for a specific secret for totp method.
+     * Can be encoded as a image for simple configuration in 
+     * Google Authenticator.
+     *
+     * @param string $name the name of the account / profile
+     * @return string the uri for the hmac secret
+     */
+    public function provisioning_uri($name) {
+      return "otpauth://totp/".urlencode($name)."?secret={$this->secret}";
+    }
+
+    /**
+     * Transform a timestamp in a counter based on specified internal
+     *
+     * @param integer $timestamp
+     * @return integer the timecode
+     */
+    protected function timecode($timestamp) {
+      return (int)( (((int)$timestamp * 1000) / ($this->interval * 1000)));
+    }
+  }
+
+}

+ 83 - 0
lib/otphp/vendor/base32.php

@@ -0,0 +1,83 @@
+<?php
+
+/**
+ * Encode in Base32 based on RFC 4648.
+ * Requires 20% more space than base64  
+ * Great for case-insensitive filesystems like Windows and URL's  (except for = char which can be excluded using the pad option for urls)
+ *
+ * @package default
+ * @author Bryan Ruiz
+ **/
+class Base32 {
+
+   private static $map = array(
+        'A', 'B', 'C', 'D', 'E', 'F', 'G', 'H', //  7
+        'I', 'J', 'K', 'L', 'M', 'N', 'O', 'P', // 15
+        'Q', 'R', 'S', 'T', 'U', 'V', 'W', 'X', // 23
+        'Y', 'Z', '2', '3', '4', '5', '6', '7', // 31
+        '='  // padding char
+    );
+    
+   private static $flippedMap = array(
+        'A'=>'0', 'B'=>'1', 'C'=>'2', 'D'=>'3', 'E'=>'4', 'F'=>'5', 'G'=>'6', 'H'=>'7',
+        'I'=>'8', 'J'=>'9', 'K'=>'10', 'L'=>'11', 'M'=>'12', 'N'=>'13', 'O'=>'14', 'P'=>'15',
+        'Q'=>'16', 'R'=>'17', 'S'=>'18', 'T'=>'19', 'U'=>'20', 'V'=>'21', 'W'=>'22', 'X'=>'23',
+        'Y'=>'24', 'Z'=>'25', '2'=>'26', '3'=>'27', '4'=>'28', '5'=>'29', '6'=>'30', '7'=>'31'
+    );
+    
+    /**
+     *    Use padding false when encoding for urls
+     *
+     * @return base32 encoded string
+     * @author Bryan Ruiz
+     **/
+    public static function encode($input, $padding = true) {
+        if(empty($input)) return "";
+        $input = str_split($input);
+        $binaryString = "";
+        for($i = 0; $i < count($input); $i++) {
+            $binaryString .= str_pad(base_convert(ord($input[$i]), 10, 2), 8, '0', STR_PAD_LEFT);
+        }
+        $fiveBitBinaryArray = str_split($binaryString, 5);
+        $base32 = "";
+        $i=0;
+        while($i < count($fiveBitBinaryArray)) {    
+            $base32 .= self::$map[base_convert(str_pad($fiveBitBinaryArray[$i], 5,'0'), 2, 10)];
+            $i++;
+        }
+        if($padding && ($x = strlen($binaryString) % 40) != 0) {
+            if($x == 8) $base32 .= str_repeat(self::$map[32], 6);
+            else if($x == 16) $base32 .= str_repeat(self::$map[32], 4);
+            else if($x == 24) $base32 .= str_repeat(self::$map[32], 3);
+            else if($x == 32) $base32 .= self::$map[32];
+        }
+        return $base32;
+    }
+    
+    public static function decode($input) {
+        if(empty($input)) return;
+        $paddingCharCount = substr_count($input, self::$map[32]);
+        $allowedValues = array(6,4,3,1,0);
+        if(!in_array($paddingCharCount, $allowedValues)) return false;
+        for($i=0; $i<4; $i++){ 
+            if($paddingCharCount == $allowedValues[$i] && 
+                substr($input, -($allowedValues[$i])) != str_repeat(self::$map[32], $allowedValues[$i])) return false;
+        }
+        $input = str_replace('=','', $input);
+        $input = str_split($input);
+        $binaryString = "";
+        for($i=0; $i < count($input); $i = $i+8) {
+            $x = "";
+            if(!in_array($input[$i], self::$map)) return false;
+            for($j=0; $j < 8; $j++) {
+                $x .= str_pad(base_convert(@self::$flippedMap[@$input[$i + $j]], 10, 2), 5, '0', STR_PAD_LEFT);
+            }
+            $eightBits = str_split($x, 8);
+            for($z = 0; $z < count($eightBits); $z++) {
+                $binaryString .= ( ($y = chr(base_convert($eightBits[$z], 2, 10))) || ord($y) == 48 ) ? $y:"";
+            }
+        }
+        return $binaryString;
+    }
+}
+

+ 26 - 0
lib/otphp/vendor/libs.php

@@ -0,0 +1,26 @@
+<?php
+/*
+ * Copyright (c) 2011 Le Lag 
+ * Permission is hereby granted, free of charge, to any person obtaining a copy
+ * of this software and associated documentation files (the "Software"), to deal
+ * in the Software without restriction, including without limitation the rights
+ * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+ * copies of the Software, and to permit persons to whom the Software is
+ * furnished to do so, subject to the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be included in
+ * all copies or substantial portions of the Software.
+
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+ * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+ * THE SOFTWARE.
+ */
+
+// Add any needed third party library to this directory
+
+//require_once dirname(__FILE__).'/some_lib/lib.php';
+require_once dirname(__FILE__).'/base32.php';

+ 38 - 0
lib/phpqrcode/CHANGELOG

@@ -0,0 +1,38 @@
+* 1.0.0 build 2010031920 
+
+  - first public release
+  - help in readme, install
+  - cleanup ans separation of QRtools and QRspec
+  - now TCPDF binding requires minimal changes in TCPDF, having most of job
+    done in QRtools tcpdfBarcodeArray
+  - nicer QRtools::timeBenchmark output
+  - license and copyright notices in files
+  - indent cleanup - from tab to 4spc, keep it that way please :)
+  - sf project, repository, wiki
+  - simple code generator in index.php
+  
+* 1.1.0 build 2010032113
+
+  - added merge tool wich generate merged version of code
+    located in phpqrcode.php
+  - splited qrconst.php from qrlib.php
+  
+* 1.1.1 build 2010032405
+
+  - patch by Rick Seymour allowing saving PNG and displaying it at the same time
+  - added version info in VERSION file
+  - modified merge tool to include version info into generated file
+  - fixed e-mail in almost all head comments
+  
+* 1.1.2 build 2010032722
+
+  - full integration with TCPDF thanks to Nicola Asuni, it's author
+  - fixed bug with alphanumeric encoding detection
+  
+* 1.1.3 build 2010081807
+
+  - short opening tags replaced with standard ones
+  
+* 1.1.4 build 2010100721
+
+  - added missing static keyword QRinput::check (found by Luke Brookhart, Onjax LLC)

+ 67 - 0
lib/phpqrcode/INSTALL

@@ -0,0 +1,67 @@
+== REQUIREMENTS ==
+
+ * PHP5
+ * PHP GD2 extension with JPEG and PNG support
+ 
+== INSTALLATION ==
+
+If you want to recreate cache by yourself make sure cache directory is
+writable and you have permisions to write into it. Also make sure you are
+able to read files in it if you have cache option enabled
+ 
+== CONFIGURATION ==
+
+Feel free to modify config constants in qrconfig.php file. Read about it in
+provided comments and project wiki page (links in README file)
+
+== QUICK START ==
+
+Notice: probably you should'nt use all of this in same script :)
+
+<?phpb
+
+//include only that one, rest required files will be included from it
+include "qrlib.php"
+
+//write code into file, Error corection lecer is lowest, L (one form: L,M,Q,H)
+//each code square will be 4x4 pixels (4x zoom)
+//code will have 2 code squares white boundary around 
+
+QRcode::png('PHP QR Code :)', 'test.png', 'L', 4, 2);
+
+//same as above but outputs file directly into browser (with appr. header etc.)
+//all other settings are default
+//WARNING! it should be FIRST and ONLY output generated by script, otherwise
+//rest of output will land inside PNG binary, breaking it for sure
+QRcode::png('PHP QR Code :)');
+
+//show benchmark
+QRtools::timeBenchmark();
+
+//rebuild cache
+QRtools::buildCache();
+
+//code generated in text mode - as a binary table
+//then displayed out as HTML using Unicode block building chars :)
+$tab = $qr->encode('PHP QR Code :)');
+QRspec::debug($tab, true);
+
+== TCPDF INTEGRATION ==
+
+Inside bindings/tcpdf you will find slightly modified 2dbarcodes.php.
+Instal phpqrcode liblaty inside tcpdf folder, then overwrite (or merge)
+2dbarcodes.php 
+
+Then use similar as example #50 from TCPDF examples:
+
+<?php
+
+$style = array(
+    'border' => true,
+    'padding' => 4,
+    'fgcolor' => array(0,0,0),
+    'bgcolor' => false, //array(255,255,255)
+);
+
+//code name: QR, specify error correction level after semicolon (L,M,Q,H)
+$pdf->write2DBarcode('PHP QR Code :)', 'QR,L', '', '', 30, 30, $style, 'N');

+ 165 - 0
lib/phpqrcode/LICENSE

@@ -0,0 +1,165 @@
+                  GNU LESSER GENERAL PUBLIC LICENSE
+                       Version 3, 29 June 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <http://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+
+  This version of the GNU Lesser General Public License incorporates
+the terms and conditions of version 3 of the GNU General Public
+License, supplemented by the additional permissions listed below.
+
+  0. Additional Definitions.
+
+  As used herein, "this License" refers to version 3 of the GNU Lesser
+General Public License, and the "GNU GPL" refers to version 3 of the GNU
+General Public License.
+
+  "The Library" refers to a covered work governed by this License,
+other than an Application or a Combined Work as defined below.
+
+  An "Application" is any work that makes use of an interface provided
+by the Library, but which is not otherwise based on the Library.
+Defining a subclass of a class defined by the Library is deemed a mode
+of using an interface provided by the Library.
+
+  A "Combined Work" is a work produced by combining or linking an
+Application with the Library.  The particular version of the Library
+with which the Combined Work was made is also called the "Linked
+Version".
+
+  The "Minimal Corresponding Source" for a Combined Work means the
+Corresponding Source for the Combined Work, excluding any source code
+for portions of the Combined Work that, considered in isolation, are
+based on the Application, and not on the Linked Version.
+
+  The "Corresponding Application Code" for a Combined Work means the
+object code and/or source code for the Application, including any data
+and utility programs needed for reproducing the Combined Work from the
+Application, but excluding the System Libraries of the Combined Work.
+
+  1. Exception to Section 3 of the GNU GPL.
+
+  You may convey a covered work under sections 3 and 4 of this License
+without being bound by section 3 of the GNU GPL.
+
+  2. Conveying Modified Versions.
+
+  If you modify a copy of the Library, and, in your modifications, a
+facility refers to a function or data to be supplied by an Application
+that uses the facility (other than as an argument passed when the
+facility is invoked), then you may convey a copy of the modified
+version:
+
+   a) under this License, provided that you make a good faith effort to
+   ensure that, in the event an Application does not supply the
+   function or data, the facility still operates, and performs
+   whatever part of its purpose remains meaningful, or
+
+   b) under the GNU GPL, with none of the additional permissions of
+   this License applicable to that copy.
+
+  3. Object Code Incorporating Material from Library Header Files.
+
+  The object code form of an Application may incorporate material from
+a header file that is part of the Library.  You may convey such object
+code under terms of your choice, provided that, if the incorporated
+material is not limited to numerical parameters, data structure
+layouts and accessors, or small macros, inline functions and templates
+(ten or fewer lines in length), you do both of the following:
+
+   a) Give prominent notice with each copy of the object code that the
+   Library is used in it and that the Library and its use are
+   covered by this License.
+
+   b) Accompany the object code with a copy of the GNU GPL and this license
+   document.
+
+  4. Combined Works.
+
+  You may convey a Combined Work under terms of your choice that,
+taken together, effectively do not restrict modification of the
+portions of the Library contained in the Combined Work and reverse
+engineering for debugging such modifications, if you also do each of
+the following:
+
+   a) Give prominent notice with each copy of the Combined Work that
+   the Library is used in it and that the Library and its use are
+   covered by this License.
+
+   b) Accompany the Combined Work with a copy of the GNU GPL and this license
+   document.
+
+   c) For a Combined Work that displays copyright notices during
+   execution, include the copyright notice for the Library among
+   these notices, as well as a reference directing the user to the
+   copies of the GNU GPL and this license document.
+
+   d) Do one of the following:
+
+       0) Convey the Minimal Corresponding Source under the terms of this
+       License, and the Corresponding Application Code in a form
+       suitable for, and under terms that permit, the user to
+       recombine or relink the Application with a modified version of
+       the Linked Version to produce a modified Combined Work, in the
+       manner specified by section 6 of the GNU GPL for conveying
+       Corresponding Source.
+
+       1) Use a suitable shared library mechanism for linking with the
+       Library.  A suitable mechanism is one that (a) uses at run time
+       a copy of the Library already present on the user's computer
+       system, and (b) will operate properly with a modified version
+       of the Library that is interface-compatible with the Linked
+       Version.
+
+   e) Provide Installation Information, but only if you would otherwise
+   be required to provide such information under section 6 of the
+   GNU GPL, and only to the extent that such information is
+   necessary to install and execute a modified version of the
+   Combined Work produced by recombining or relinking the
+   Application with a modified version of the Linked Version. (If
+   you use option 4d0, the Installation Information must accompany
+   the Minimal Corresponding Source and Corresponding Application
+   Code. If you use option 4d1, you must provide the Installation
+   Information in the manner specified by section 6 of the GNU GPL
+   for conveying Corresponding Source.)
+
+  5. Combined Libraries.
+
+  You may place library facilities that are a work based on the
+Library side by side in a single library together with other library
+facilities that are not Applications and are not covered by this
+License, and convey such a combined library under terms of your
+choice, if you do both of the following:
+
+   a) Accompany the combined library with a copy of the same work based
+   on the Library, uncombined with any other library facilities,
+   conveyed under the terms of this License.
+
+   b) Give prominent notice with the combined library that part of it
+   is a work based on the Library, and explaining where to find the
+   accompanying uncombined form of the same work.
+
+  6. Revised Versions of the GNU Lesser General Public License.
+
+  The Free Software Foundation may publish revised and/or new versions
+of the GNU Lesser General Public License from time to time. Such new
+versions will be similar in spirit to the present version, but may
+differ in detail to address new problems or concerns.
+
+  Each version is given a distinguishing version number. If the
+Library as you received it specifies that a certain numbered version
+of the GNU Lesser General Public License "or any later version"
+applies to it, you have the option of following the terms and
+conditions either of that published version or of any later version
+published by the Free Software Foundation. If the Library as you
+received it does not specify a version number of the GNU Lesser
+General Public License, you may choose any version of the GNU Lesser
+General Public License ever published by the Free Software Foundation.
+
+  If the Library as you received it specifies that a proxy can decide
+whether future versions of the GNU Lesser General Public License shall
+apply, that proxy's public statement of acceptance of any version is
+permanent authorization for you to choose that version for the
+Library.

+ 45 - 0
lib/phpqrcode/README

@@ -0,0 +1,45 @@
+This is PHP implementation of QR Code 2-D barcode generator. It is pure-php
+LGPL-licensed implementation based on C libqrencode by Kentaro Fukuchi.
+
+== LICENSING ==
+
+Copyright (C) 2010 by Dominik Dzienia 
+
+This library is free software; you can redistribute it and/or modify it under
+the terms of the GNU Lesser General Public License as published by the Free
+Software Foundation; either version 3 of the License, or any later version.
+
+This library is distributed in the hope that it will be useful, but WITHOUT ANY
+WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A
+PARTICULAR PURPOSE. See the GNU Lesser General Public License (LICENSE file)
+for more details.
+
+You should have received a copy of the GNU Lesser General Public License along
+with this library; if not, write to the Free Software Foundation, Inc., 51
+Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
+
+== INSTALATION AND USAGE ==
+
+ * INSTALL file
+ * http://sourceforge.net/apps/mediawiki/phpqrcode/index.php?title=Main_Page
+
+== CONTACT ==
+
+Fell free to contact me via e-mail (deltalab at poczta dot fm) or using
+folowing project pages:
+
+ * http://sourceforge.net/projects/phpqrcode/
+ * http://phpqrcode.sourceforge.net/
+  
+== ACKNOWLEDGMENTS ==
+
+Based on C libqrencode library (ver. 3.1.1) 
+Copyright (C) 2006-2010 by Kentaro Fukuchi
+http://megaui.net/fukuchi/works/qrencode/index.en.html
+
+QR Code is registered trademarks of DENSO WAVE INCORPORATED in JAPAN and other
+countries.
+
+Reed-Solomon code encoder is written by Phil Karn, KA9Q.
+Copyright (C) 2002, 2003, 2004, 2006 Phil Karn, KA9Q
+ 

+ 2 - 0
lib/phpqrcode/VERSION

@@ -0,0 +1,2 @@
+1.1.4
+2010100721

File diff suppressed because it is too large
+ 2875 - 0
lib/phpqrcode/bindings/tcpdf/qrcode.php


+ 2 - 0
lib/phpqrcode/cache/frame_1.dat

@@ -0,0 +1,2 @@
+xÚ��Á
À E9³u��`³"PÅ„CÛ牗T!0$
+E•É²Q™�Ém½úhÛ¾9{kI"› 9Ln)Ap¤åÖ¾Ë>ß^‡Õz³mënÅ–;ü´mßn†ú¦Ë

BIN
lib/phpqrcode/cache/frame_1.png


BIN
lib/phpqrcode/cache/frame_10.dat


BIN
lib/phpqrcode/cache/frame_10.png


BIN
lib/phpqrcode/cache/frame_11.dat


BIN
lib/phpqrcode/cache/frame_11.png


BIN
lib/phpqrcode/cache/frame_12.dat


BIN
lib/phpqrcode/cache/frame_12.png


BIN
lib/phpqrcode/cache/frame_13.dat


BIN
lib/phpqrcode/cache/frame_13.png


BIN
lib/phpqrcode/cache/frame_14.dat


BIN
lib/phpqrcode/cache/frame_14.png


BIN
lib/phpqrcode/cache/frame_15.dat


BIN
lib/phpqrcode/cache/frame_15.png


+ 1 - 0
lib/phpqrcode/cache/frame_16.dat

@@ -0,0 +1 @@
+xÚí™A„ E]sëIX´;¸Ün6€È`‚q”êêW6ñ奚`Œ%A/3!¢°‚¢Š!g–ÈÌ¡’1N)éE¢Ï|;®—>6â¸�Þ97$ëÄôëc]kkö�wé1Öü[·m­CÍœcÊRºÄê¹>¦èµ¾šE,•hʼnp„#áxF�yWÏÇVWGçòÕ3¼Õ+шþàË“úSŽâ}Äž�#áG8b^c^cÏÀŽp„c&3YQ"ñŽ÷çÌvµù›…ñàÎþþ¼–¹kÞ9ŠÜ‡÷}”¹³ï×ú	¢Ä¿�QäÿL—/ÝÔÀÏ

BIN
lib/phpqrcode/cache/frame_16.png


BIN
lib/phpqrcode/cache/frame_17.dat


BIN
lib/phpqrcode/cache/frame_17.png


+ 2 - 0
lib/phpqrcode/cache/frame_18.dat

@@ -0,0 +1,2 @@
+xÚí™A
+ƒ0E]çÖ…,2;sƒä&ÉÍšh¥ÛêO¡ôÝÈàã1&[email protected]ÒÌ&§Ù‰K�XÈÕFv•<Ádqò9Ö<%h•¹Yïs!(d¥²ës;~||b(ÏøYůg#µ`œK ±S¼Åô¹Ä¶˜ùsàidß�Lg:Ó™Îtþ/gmª�™ƒkÅMâ3³{­4rTÈQýÿe¥·s·>ó<Ó™Ît¦3�éÌ;ïH¼#Ñ™Ît¦3�ÍYœ+og©hù¶óµÙ½¬lnðûF>Øi^»#awm;gè~pÛgìNs{6z’‘»ãºïÞäp¾Ê'

BIN
lib/phpqrcode/cache/frame_18.png


+ 3 - 0
lib/phpqrcode/cache/frame_19.dat

@@ -0,0 +1,3 @@
+xÚíšA
+Ä E»öÖ.ĚNo 7Ń›Ť¶iiRÚN2‹áW%đxÁ@ÚÚśę'­
+u�6×ę�.ť*S;}�«ŇĂ ĎTúčĚzrŤtąď%ç,ŇĹÚâÎ}ç;“âç)ąź�âÝZÚîLĺčą÷¬Pçç$Ż×÷ĎqËgśLÂôdJ‡;Üáw¸Ăý.]z#źľ«[Íť˝ďOg‚­Ćô"ĐË	áBíî¦}Ç}‡;Üáw¸Ăî�#1GbŽ„;Üáw¸Ăý_ÝC+w˘@Dfî÷ďç™uťř2™ĹÚÉNţű9R7|pWßkďű®ż“ßßkşöżşú»ĽÎÓ

BIN
lib/phpqrcode/cache/frame_19.png


+ 1 - 0
lib/phpqrcode/cache/frame_2.dat

@@ -0,0 +1 @@
+xÚÍ’Í
À F{vë& à&°Y+?Z1öÐSŸ'y!¢ŸÌÁa�815&£•Û´ŽÙHå£Ùžc³•l«ÏFÆè1º#é6fÊÖü©§6Äø•O7ˆ¨†C¦«›ðÖ�ž�Ï8gI®ÏöfB¦ÃÄÿæ\DÔ»(

BIN
lib/phpqrcode/cache/frame_2.png


BIN
lib/phpqrcode/cache/frame_20.dat


BIN
lib/phpqrcode/cache/frame_20.png


+ 1 - 0
lib/phpqrcode/cache/frame_21.dat

@@ -0,0 +1 @@
+xÚíšA„ E]sëIX´;¹Ün6Up‚�“в™ÿ]Ù˜þ<i-eWö‹¶˜)×äÅ•¼ÉÂ…H\jvqÙHL\6–šÝÐ…rI›¢LܹÜÕ%ÅÓ@´þ±V—vÆÂúý¤(ÏP4|ÎXnÒgÉ�ß¼~]D¾ÉÕ×u1Us	S\À°€,ÿÅ2Þ¢N§Ã?D›KºüF-:“eJ]p_À°€,˜a0Ã`†ÁÝXÀ°`†Áƒw,`X´]˜ˆ™‚¹‹˜°5‰®Y4{å±æñ2íûåvçJs†±Ûí9±˜í)õu±Û¹êÏØ,«]¸“‹Ù^_§7$ƒ_Í

BIN
lib/phpqrcode/cache/frame_21.png


+ 3 - 0
lib/phpqrcode/cache/frame_22.dat

@@ -0,0 +1,3 @@
+xÚíšA
+„0E]{ë�.’]{{{³©Z¥BepÆÞ[email protected]�V›ERZ3»Á"*2o€4¦y‰)i#dÒbdFÒ…´ŒI"ú‘—4ž½W­IíuŠÓ45ßx«.Z­SÙ{ÁŸ¯8åËÿk={o.±qÊÙ£[œÍ:帒q»õƒy
+)t#á„N8ádCj�-O�OG}¼:/Ÿ:s�z!Å)^<ùe½·S·uâ{Â	'œpÂ	'ú=ú=ú=¾'œpÂ	'œp¢ß£ß£ßã�N8á„Óÿ9©ªˆôpQQõ]HÔpz¾�ØGœ^æ½Qº˜I|¾ß³�u;9™ÎïÕëd;“X~$ËÙÑÉt¶ÊÛédy

BIN
lib/phpqrcode/cache/frame_22.png


+ 3 - 0
lib/phpqrcode/cache/frame_23.dat

@@ -0,0 +1,3 @@
+xÚíšA
+à E³öÖfo 7Ñ›U�)	%M!ΔÂûYu(<šð“sK²“Tœ›Ó
+É&§IÚ\i+¥Ðª™(m®´FQ¡¹¯h±æöüèv~n1„oÏ]sëçÖï¤_ÞŸÊ3`î_w2õȹ•lc[¼•;·Ûc֟ˤ’Nóª4ÜpÃ
7ÜpÃímTÿ¸œ›‘ÝêrÞiñä_ƒç¿pS=7Þ7ÜpÃ
7ÜpÃ�>IŸ¤Oò-Á
7ÜpÃ
7ú$}’>É·7ÜpÃ
·tss‰Órs
§åVÍÎÜÆ÷’mýï¡Ò¹ò‡�Þñ}R~7ôà&¾÷º?7ù�Þý�Ô¦Iïbhâ{æ»<ÀMi-

BIN
lib/phpqrcode/cache/frame_23.png


+ 1 - 0
lib/phpqrcode/cache/frame_24.dat

@@ -0,0 +1 @@
+xΪν›Aƒ E»φΦMX0;Έ�άnVP4ΪHSS»xίU3±/O΄ύLiJ4��±VβJC�%ύ‰6VR&ΓήD‘B�HjDω‚JΟ??™―κBl­cΗ±ρ½§'σU­λXοUοή�0ζΓywΝΔ―χj¬ιλ�³€3Ε›Ύλ�cj†ω£{¨¥½:GqΔG�έρψ�ϋΪ°N†v;Ή¶η¬“J‡ΔΠ<ϋ‡Ι]�κλΘσ�#�8β�#�8βH'§“ΣΙωΝΑGqΔGιδtr:9Ο#�8β�#�8βΨ“h­�―NΤt”�΄Φ_έΨ>tΉeλμS­―¦ζ�ω^�\g―υΞQe?ωvuφΜoοΥ;�ο>μ�*οwlςΧmΡ

BIN
lib/phpqrcode/cache/frame_24.png


+ 3 - 0
lib/phpqrcode/cache/frame_25.dat

@@ -0,0 +1,3 @@
+xÚíÛA
+à …á¬së‚‹™]rƒx½Y51mMÈBG
+ÿ¸*Sx|Ua5Ƶ‚Z—Š„-,Ž1ä²HÑPÒRj–šX5§®i†©’áG©>W¥ŽžRïöÕ/Ëâ+uT廯åÏӯ嗴ªuæÏ¥Ú[Sía£[kví÷5•+5n§Á´JêÜ%+V¬X±bÅŠõ߬u'Á�±þÔû SRýå÷štzZ»ì+÷+V¬X±bÅŠ•ÙŸÙŸÙŸûŠ+V¬X±bÅÊìÏìÏìÏ}ÅŠ+V¬X±ö±ª¤¥ÖVI©¢ÖÖ‘+k«qÿ[úËtŽ·oVZÍþvoNV³wÇ}µ{³r<ýR­Þ"�RÍÞ]ê
W«r}

BIN
lib/phpqrcode/cache/frame_25.png


+ 2 - 0
lib/phpqrcode/cache/frame_26.dat

@@ -0,0 +1,2 @@
+xÚí›A
+à E³öÖ…,t§7ˆ7Ñ›U�		E)i7ï»*~cÃüÅÄXÖEBÆè°FC–˜³6¡:&çL,å¬Mv.ŽÂÎæKgŸÕ¸ãYMç>ŸÎí>ûmÛš·?ª•vô¹¾mg?�ßÒ±Îþ³æηªd˜“Cµ¹U¦ÏIk•ÚÚE\ÕÙMs†f˜a†f˜a>œ[sÓˆ9쬩ެ8bö<kÕÙ7œ}ç†k³™§õ™ÿ3Ì0Ã3Ì0Ã3Ìä*r¹Š\Å7f˜a†f˜a†fr¹Š\Å7f˜a†f˜a†YÆÙ�Îæd›4ƒ9kíÆÌÔÝyûX	y‰gŒØÙ)›«dw�nÌ¢ûU×>Ëî”]ßöLgÉÝÁ›³è¾äEo‚ w1

BIN
lib/phpqrcode/cache/frame_26.png


BIN
lib/phpqrcode/cache/frame_27.dat


BIN
lib/phpqrcode/cache/frame_27.png


BIN
lib/phpqrcode/cache/frame_28.dat


BIN
lib/phpqrcode/cache/frame_28.png


+ 2 - 0
lib/phpqrcode/cache/frame_29.dat

@@ -0,0 +1,2 @@
+xÚíÜA� …a×Ţş	‹™ťÜ@n7+*¶šÖÚ4‘!Í?®Jšđň	ł�”抮«]Ş—ÉSźâTf)–ŮsŠIÂ"…Č”bžÝ0…Š|•"Luٸî,Ž×EÇ1\6®*ĎuQŢ?Ľ>aĚĎ…ăţńŽÄRő-r­“÷n.ďꯋ\®Tżü:Ó*)|)°Ŕ,°Ŕ,ţŃâęóĺéx_ă¬}:^R„�Uoɢ‰uÁ~ÁމX`�XĐŹĐŹĐŹĐŹ°_`�X`�XĐŹĐŹĐŹ°_`�X`�XĐŹĐŹĐŹĐŹ°wb�X`�żĄPUőö)DÔŢ"cČ{‹zçÎő3ę›é<}¸óˇ^?b÷m˙ÎÂěž�íş°»óaűŽ´’Âę.�]
+ł{Q6uáT,9

BIN
lib/phpqrcode/cache/frame_29.png


+ 1 - 0
lib/phpqrcode/cache/frame_3.dat

@@ -0,0 +1 @@
+xÚí“Á
À E{vë& à&°Y+¢b¤öÐkŸ'yù‘¤¿ÌÁa :äÀTXl�Þ¶$W+Ó�vû®îœ¢9}gRæ¬@H0YPB½ÆÃEmÚÚ?ûœÍ±ísœÖ"bµìt2cnÖé†É:½ﺭë;¿Y§“ÃzÿQã«7¿Ô

BIN
lib/phpqrcode/cache/frame_3.png


BIN
lib/phpqrcode/cache/frame_30.dat


BIN
lib/phpqrcode/cache/frame_30.png


+ 1 - 0
lib/phpqrcode/cache/frame_31.dat

@@ -0,0 +1 @@
+xÚíÜAƒ …a×Þº	ØÉ
à&r³‚ Á´¸ªÎ4ù§«†´yù‚Ä·!¥mV3I�µv­!ÒœÖ2¢i\NSSä4EF2�+65Å¥‰e¾þÃ/Wœs]šñ¾‰!„Á?ÿpÅõû¦=S~ùüÄ�?Ëý+þx¦Ö6r6yö³Ùƹ}“Ç´™ë×eR1-�W•l°Ál°Á›ûÒŒÞXŸz/>Væ«·ù§:ñÒÒÄAš8üý-+mTíÎÎbl°Ál°ÁlèštMº&]“³l°Ál°Áº&]“®I×ä¼Ál°Ál°Áº&]“®Éyƒ
6Ø`ƒ
6Ø`ƒÍÝi¬uy´ØXWòè±Éi¬²\t†ýz•—Š>•.î”z¾kÊß
t²¿7©ß7òwJõÏ”¶4Òw‘�ÒˆßÓÖÍ85‰

BIN
lib/phpqrcode/cache/frame_31.png


+ 2 - 0
lib/phpqrcode/cache/frame_32.dat

@@ -0,0 +1,2 @@
+xЪнЬБ
+„ …бЦѕхЂ‹л.Я ЯDЯl¬,¦љMz‰я6›†Г‡	gcJЛD;ф'.®A’IqћЮ‰ДI,IrўYЁ»‘ЛFk%‰DюOжy|EDЄDЧы(LУ_YЌК>*Яљ?aКOѓїk±L_Ј<[c—с¶п>КcЛ�хuФLIдХ%В#Њ0В#Њ0В#ЊЮotСўљхµ}ЕЬ4Нfќv_)‰ВEўpъЏ¬h5R·Џ8Џ8і1В#Њ0В#Њ0ўУТiйґtZО#Њ0В#Њ0В#Њ0ўУТiйґtZО#Њ0В#Њ0В#Њ0ўУТiйґtZОlЊ0В#Њ0ВЈч9q"ўЙHЬњH™Qюќµп"ЫХL5}-ЭЬYЧѕУкёkм`¤в>¶zйёі®юЦ4&Тpчб!‘Љы!«щ`ї:5

BIN
lib/phpqrcode/cache/frame_32.png


+ 14 - 0
lib/phpqrcode/cache/frame_33.dat

@@ -0,0 +1,14 @@
+xЪнЬAѓ …aЧЮє‰‹™ќЬ@n7+*L++Ужџ®ут‰МbbЬ*LCп‘°‡‰ck™HҐrљ”j•ІђJ5Yнi~0•_«тЊыЧTКTх}е—e©>эц5‘b_еwРНџ?ї¤Ямж§ЦЬщ†\э­RaЖi+7хЯW©¦\гюwLUNеL¦В
++¬°В
++¬°Вкя­jЯТO·џkcлЮсфз\Л©|%•o<б‹k–­Lо+О+Оv¬°В
++¬°В
++¬°ВЉ>}ъф8Ї°В
++¬°В
++¬°В
++ъфи3РgајВ
++¬°В
++¬°В
++¬и3Рg П@џЃу
++¬°В
++¬°В
++¬°:R‰ЁЄXіЪB‰9«”IФ=зkЮЏ±o/SwзШ�™ЩЇП`g¶бЕКМИr_Щ™™YѕѓVSY™ЕzIefnmQoz
>б

BIN
lib/phpqrcode/cache/frame_33.png


BIN
lib/phpqrcode/cache/frame_34.dat


BIN
lib/phpqrcode/cache/frame_34.png


BIN
lib/phpqrcode/cache/frame_35.dat


BIN
lib/phpqrcode/cache/frame_35.png


BIN
lib/phpqrcode/cache/frame_36.dat


BIN
lib/phpqrcode/cache/frame_36.png


BIN
lib/phpqrcode/cache/frame_37.dat


BIN
lib/phpqrcode/cache/frame_37.png


+ 1 - 0
lib/phpqrcode/cache/frame_38.dat

@@ -0,0 +1 @@
+xÚíÝAªƒ0ÐŽÝuÁA2«;Ð�èÎkü(üg¾Ày•tp9Äï$Ëò™¹Dœ”ò¼\ºe^'tÒ-aIºŠFMšSškÂðIóŤÓ:7®¤|LúkŸNã8N7®œöi}ö‡×Ÿi,Ÿ[W†¿g®Ó´Ì°ë?3ô1÷i™¾N·}}=ÂOM:4“”)S¦L™2eÊ”)S¦L#$½ÿ
ôÂJã­þÂJM:}ý]˜•ÖL›Ù§ÎSÿQL™2eÊ”)S¦L™2Õ¡èPt(:Šó”)S¦L™2eÊ”)S¦:ŠE‡¢Cqž2eÊ”)S¦L™2eÊ”©E‡¢CÑ¡8O™2eÊ”)S¦L™2eÊT‡¢CÑ¡èPœ§L™2eÊ”)S¦L™2Ý“¦”sJCIKÖÔ‚iÍ93�ônº_Ñòÿ¾¿ü¼“+R‡û®£“ièû£Žû4ö�\Çg¿¥¤‘ïŽ;%
}ßaÞnŽ£

BIN
lib/phpqrcode/cache/frame_38.png


BIN
lib/phpqrcode/cache/frame_39.dat


BIN
lib/phpqrcode/cache/frame_39.png


+ 1 - 0
lib/phpqrcode/cache/frame_4.dat

@@ -0,0 +1 @@
+xÚí”Á
À E=»uÐ
pجQ•ØCOMŸ'ÃË�$ ³@à¨Ø3e–F©\FNXRyÉؾC{‰a8­RæŃ[email protected]ñ圉qküßÉH1ê(£�ˆÅ`cç¦j³~Ë0ö¥¿ÃܨÖËÃعnXÿGåÿ�Ä€

BIN
lib/phpqrcode/cache/frame_4.png


+ 2 - 0
lib/phpqrcode/cache/frame_40.dat

@@ -0,0 +1,2 @@
+xΪνέA�ƒ@Π¬½υ€‹ξ�ή@oΆ7“�`“QfeΊδ•«PA>�¦ΐΪτ<?jjo5WNiz�›yΊWύ‰σ΄&]ί…C?“I�rώWβρ^;ο8·—
+γύs<Γ°ϋφS{Ε9^gEί}>γ°<]ίΥΠλί³bZ«nγ¥^A›φQ}[χ9^�]«yώμnajMά‡KΜ�1cΖ�3fΜ�1γΈΖ{ίW5}η½{ΝΡ7lMί�οή�xάI<ΌαK½¨ΖαΞ±yl3fΜ�1cΖ�3fΜ�1γ«Ϋ»Ω»={·“Ξ±yl3fΜ�1cΖ�3fΜ�1γ«Ϋ»Ω»={·“Ξ±yl3fΜ�1cΖ�3fΜ�1γ«Ϋ»Ω»={·“Ξ±yl3fΜ�1cΖ�3fΜ�1γ«Ϋ»Ω»={·“Ξ±yl3fΜ�1cΖ�3fΜ�ρχη�SΚ‘�Σ’7¥HΖKήΌg\ηΎβuυίΟ_��r'4ά[ηή-Ζ]›…q�ϋL·η8Ζ�±ΫY1q„»�‹Δ!ξ—ήΤ/(%ϋ

BIN
lib/phpqrcode/cache/frame_40.png


+ 1 - 0
lib/phpqrcode/cache/frame_5.dat

@@ -0,0 +1 @@
+xÚí”1À E�½u 7ЛÀÍZµ‡|N†—üD[email protected]R$l,-™>VKZ[<ýØÚz—qÆŽ¨ØYJ&ƒi�åš‚‹ZyË:Y'ë¯YµÁVÿ&—e•RÄ"§sj©Ýrþö+Ëé‰ù.·MÆŽ»–Ó9ÓòzµsŽ”É,

BIN
lib/phpqrcode/cache/frame_5.png


BIN
lib/phpqrcode/cache/frame_6.dat


BIN
lib/phpqrcode/cache/frame_6.png


BIN
lib/phpqrcode/cache/frame_7.dat


BIN
lib/phpqrcode/cache/frame_7.png


BIN
lib/phpqrcode/cache/frame_8.dat


BIN
lib/phpqrcode/cache/frame_8.png


BIN
lib/phpqrcode/cache/frame_9.dat


BIN
lib/phpqrcode/cache/frame_9.png


BIN
lib/phpqrcode/cache/mask_0/mask_101_0.dat


BIN
lib/phpqrcode/cache/mask_0/mask_105_0.dat


+ 2 - 0
lib/phpqrcode/cache/mask_0/mask_109_0.dat

@@ -0,0 +1,2 @@
+xÚíÚ=
+€0н§iï9'Åb‡$ ¾tËýáÚû^#i�ª¥Ëi?³ÅôÛbúK[AUØFå¾�Ƶijx]mŸ]2Ž������-Ä–�KŽ~ÏVw}¶X›ûÆÆÆÆÆÆÆ&O²É“Þ666666yRž”'½%lllll/´åhœl…Ãîm	¹¤ê�ádël™¶´3Ù+ïÛmÍ«

+ 0 - 0
lib/phpqrcode/cache/mask_0/mask_113_0.dat


Some files were not shown because too many files changed in this diff