summaryrefslogtreecommitdiff
path: root/classes/auth_internal.php
diff options
context:
space:
mode:
authorAndrew Dolgov <[email protected]>2012-08-17 14:20:55 +0400
committerAndrew Dolgov <[email protected]>2012-08-17 14:22:33 +0400
commit369dbc19d6ae35c97a2306ae4821c7812e2f24b2 (patch)
treefff54920611300f99e0898874e0de04c99ac5586 /classes/auth_internal.php
parent3d2c9f5adfdc51642143d9fecf31ee353735bb8e (diff)
rework class system to use subdirectories
add placeholder plugin/hook system
Diffstat (limited to 'classes/auth_internal.php')
-rw-r--r--classes/auth_internal.php118
1 files changed, 0 insertions, 118 deletions
diff --git a/classes/auth_internal.php b/classes/auth_internal.php
deleted file mode 100644
index 8890d4455..000000000
--- a/classes/auth_internal.php
+++ /dev/null
@@ -1,118 +0,0 @@
-<?php
-class Auth_Internal extends Auth_Base {
-
- function authenticate($login, $password) {
-
- $pwd_hash1 = encrypt_password($password);
- $pwd_hash2 = encrypt_password($password, $login);
- $login = db_escape_string($login);
-
- if (get_schema_version($this->link) > 87) {
-
- $result = db_query($this->link, "SELECT salt FROM ttrss_users WHERE
- login = '$login'");
-
- if (db_num_rows($result) != 1) {
- return false;
- }
-
- $salt = db_fetch_result($result, 0, "salt");
-
- if ($salt == "") {
-
- $query = "SELECT id
- FROM ttrss_users WHERE
- login = '$login' AND (pwd_hash = '$pwd_hash1' OR
- pwd_hash = '$pwd_hash2')";
-
- // verify and upgrade password to new salt base
-
- $result = db_query($this->link, $query);
-
- if (db_num_rows($result) == 1) {
- // upgrade password to MODE2
-
- $salt = substr(bin2hex(get_random_bytes(125)), 0, 250);
- $pwd_hash = encrypt_password($password, $salt, true);
-
- db_query($this->link, "UPDATE ttrss_users SET
- pwd_hash = '$pwd_hash', salt = '$salt' WHERE login = '$login'");
-
- $query = "SELECT id
- FROM ttrss_users WHERE
- login = '$login' AND pwd_hash = '$pwd_hash'";
-
- } else {
- return false;
- }
-
- } else {
-
- $pwd_hash = encrypt_password($password, $salt, true);
-
- $query = "SELECT id
- FROM ttrss_users WHERE
- login = '$login' AND pwd_hash = '$pwd_hash'";
-
- }
-
- } else {
- $query = "SELECT id
- FROM ttrss_users WHERE
- login = '$login' AND (pwd_hash = '$pwd_hash1' OR
- pwd_hash = '$pwd_hash2')";
- }
-
- $result = db_query($this->link, $query);
-
- if (db_num_rows($result) == 1) {
- return db_fetch_result($result, 0, "id");
- }
-
- return false;
- }
-
- function change_password($owner_uid, $old_password, $new_password) {
- $owner_uid = db_escape_string($owner_uid);
-
- $result = db_query($this->link, "SELECT salt,login FROM ttrss_users WHERE
- id = '$owner_uid'");
-
- $salt = db_fetch_result($result, 0, "salt");
- $login = db_fetch_result($result, 0, "login");
-
- if (!$salt) {
- $old_password_hash1 = encrypt_password($old_password);
- $old_password_hash2 = encrypt_password($old_password, $login);
-
- $query = "SELECT id FROM ttrss_users WHERE
- id = '$owner_uid' AND (pwd_hash = '$old_password_hash1' OR
- pwd_hash = '$old_password_hash2')";
-
- } else {
- $old_password_hash = encrypt_password($old_password, $salt, true);
-
- $query = "SELECT id FROM ttrss_users WHERE
- id = '$owner_uid' AND pwd_hash = '$old_password_hash'";
- }
-
- $result = db_query($this->link, $query);
-
- if (db_num_rows($result) == 1) {
-
- $new_salt = substr(bin2hex(get_random_bytes(125)), 0, 250);
- $new_password_hash = encrypt_password($new_password, $new_salt, true);
-
- db_query($this->link, "UPDATE ttrss_users SET
- pwd_hash = '$new_password_hash', salt = '$new_salt'
- WHERE id = '$owner_uid'");
-
- $_SESSION["pwd_hash"] = $new_password_hash;
-
- return __("Password has been changed.");
- } else {
- return "ERROR: ".__('Old password is incorrect.');
- }
- }
-}
-?>