PHP Classes

File: system/core/compat/password.php

Recommend this page to a friend!
  Classes of Abed Nego Ragil Putra   CodeIgniter ion Auth Login   system/core/compat/password.php   Download  
File: system/core/compat/password.php
Role: Example script
Content type: text/plain
Description: Example script
Class: CodeIgniter ion Auth Login
Manage user records in a database with CodeIgniter
Author: By
Last change:
Date: 6 years ago
Size: 7,523 bytes
 

Contents

Class file image Download
<?php
/**
 * CodeIgniter
 *
 * An open source application development framework for PHP
 *
 * This content is released under the MIT License (MIT)
 *
 * Copyright (c) 2014 - 2017, British Columbia Institute of Technology
 *
 * Permission is hereby granted, free of charge, to any person obtaining a copy
 * of this software and associated documentation files (the "Software"), to deal
 * in the Software without restriction, including without limitation the rights
 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 * copies of the Software, and to permit persons to whom the Software is
 * furnished to do so, subject to the following conditions:
 *
 * The above copyright notice and this permission notice shall be included in
 * all copies or substantial portions of the Software.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 * THE SOFTWARE.
 *
 * @package CodeIgniter
 * @author EllisLab Dev Team
 * @copyright Copyright (c) 2008 - 2014, EllisLab, Inc. (https://ellislab.com/)
 * @copyright Copyright (c) 2014 - 2017, British Columbia Institute of Technology (http://bcit.ca/)
 * @license http://opensource.org/licenses/MIT MIT License
 * @link https://codeigniter.com
 * @since Version 3.0.0
 * @filesource
 */
defined('BASEPATH') OR exit('No direct script access allowed');

/**
 * PHP ext/standard/password compatibility package
 *
 * @package CodeIgniter
 * @subpackage CodeIgniter
 * @category Compatibility
 * @author Andrey Andreev
 * @link https://codeigniter.com/user_guide/
 * @link http://php.net/password
 */

// ------------------------------------------------------------------------

if (is_php('5.5') OR ! defined('CRYPT_BLOWFISH') OR CRYPT_BLOWFISH !== 1 OR defined('HHVM_VERSION'))
{
    return;
}

// ------------------------------------------------------------------------

defined('PASSWORD_BCRYPT') OR define('PASSWORD_BCRYPT', 1);
defined('PASSWORD_DEFAULT') OR define('PASSWORD_DEFAULT', PASSWORD_BCRYPT);

// ------------------------------------------------------------------------

if ( ! function_exists('password_get_info'))
{
   
/**
     * password_get_info()
     *
     * @link http://php.net/password_get_info
     * @param string $hash
     * @return array
     */
   
function password_get_info($hash)
    {
        return (
strlen($hash) < 60 OR sscanf($hash, '$2y$%d', $hash) !== 1)
            ? array(
'algo' => 0, 'algoName' => 'unknown', 'options' => array())
            : array(
'algo' => 1, 'algoName' => 'bcrypt', 'options' => array('cost' => $hash));
    }
}

// ------------------------------------------------------------------------

if ( ! function_exists('password_hash'))
{
   
/**
     * password_hash()
     *
     * @link http://php.net/password_hash
     * @param string $password
     * @param int $algo
     * @param array $options
     * @return mixed
     */
   
function password_hash($password, $algo, array $options = array())
    {
        static
$func_overload;
        isset(
$func_overload) OR $func_overload = (extension_loaded('mbstring') && ini_get('mbstring.func_overload'));

        if (
$algo !== 1)
        {
           
trigger_error('password_hash(): Unknown hashing algorithm: '.(int) $algo, E_USER_WARNING);
            return
NULL;
        }

        if (isset(
$options['cost']) && ($options['cost'] < 4 OR $options['cost'] > 31))
        {
           
trigger_error('password_hash(): Invalid bcrypt cost parameter specified: '.(int) $options['cost'], E_USER_WARNING);
            return
NULL;
        }

        if (isset(
$options['salt']) && ($saltlen = ($func_overload ? mb_strlen($options['salt'], '8bit') : strlen($options['salt']))) < 22)
        {
           
trigger_error('password_hash(): Provided salt is too short: '.$saltlen.' expecting 22', E_USER_WARNING);
            return
NULL;
        }
        elseif ( ! isset(
$options['salt']))
        {
            if (
function_exists('random_bytes'))
            {
                try
                {
                   
$options['salt'] = random_bytes(16);
                }
                catch (
Exception $e)
                {
                   
log_message('error', 'compat/password: Error while trying to use random_bytes(): '.$e->getMessage());
                    return
FALSE;
                }
            }
            elseif (
defined('MCRYPT_DEV_URANDOM'))
            {
               
$options['salt'] = mcrypt_create_iv(16, MCRYPT_DEV_URANDOM);
            }
            elseif (
DIRECTORY_SEPARATOR === '/' && (is_readable($dev = '/dev/arandom') OR is_readable($dev = '/dev/urandom')))
            {
                if ((
$fp = fopen($dev, 'rb')) === FALSE)
                {
                   
log_message('error', 'compat/password: Unable to open '.$dev.' for reading.');
                    return
FALSE;
                }

               
// Try not to waste entropy ...
               
is_php('5.4') && stream_set_chunk_size($fp, 16);

               
$options['salt'] = '';
                for (
$read = 0; $read < 16; $read = ($func_overload) ? mb_strlen($options['salt'], '8bit') : strlen($options['salt']))
                {
                    if ((
$read = fread($fp, 16 - $read)) === FALSE)
                    {
                       
log_message('error', 'compat/password: Error while reading from '.$dev.'.');
                        return
FALSE;
                    }
                   
$options['salt'] .= $read;
                }

               
fclose($fp);
            }
            elseif (
function_exists('openssl_random_pseudo_bytes'))
            {
               
$is_secure = NULL;
               
$options['salt'] = openssl_random_pseudo_bytes(16, $is_secure);
                if (
$is_secure !== TRUE)
                {
                   
log_message('error', 'compat/password: openssl_random_pseudo_bytes() set the $cryto_strong flag to FALSE');
                    return
FALSE;
                }
            }
            else
            {
               
log_message('error', 'compat/password: No CSPRNG available.');
                return
FALSE;
            }

           
$options['salt'] = str_replace('+', '.', rtrim(base64_encode($options['salt']), '='));
        }
        elseif ( !
preg_match('#^[a-zA-Z0-9./]+$#D', $options['salt']))
        {
           
$options['salt'] = str_replace('+', '.', rtrim(base64_encode($options['salt']), '='));
        }

        isset(
$options['cost']) OR $options['cost'] = 10;

        return (
strlen($password = crypt($password, sprintf('$2y$%02d$%s', $options['cost'], $options['salt']))) === 60)
            ?
$password
           
: FALSE;
    }
}

// ------------------------------------------------------------------------

if ( ! function_exists('password_needs_rehash'))
{
   
/**
     * password_needs_rehash()
     *
     * @link http://php.net/password_needs_rehash
     * @param string $hash
     * @param int $algo
     * @param array $options
     * @return bool
     */
   
function password_needs_rehash($hash, $algo, array $options = array())
    {
       
$info = password_get_info($hash);

        if (
$algo !== $info['algo'])
        {
            return
TRUE;
        }
        elseif (
$algo === 1)
        {
           
$options['cost'] = isset($options['cost']) ? (int) $options['cost'] : 10;
            return (
$info['options']['cost'] !== $options['cost']);
        }

       
// Odd at first glance, but according to a comment in PHP's own unit tests,
        // because it is an unknown algorithm - it's valid and therefore doesn't
        // need rehashing.
       
return FALSE;
    }
}

// ------------------------------------------------------------------------

if ( ! function_exists('password_verify'))
{
   
/**
     * password_verify()
     *
     * @link http://php.net/password_verify
     * @param string $password
     * @param string $hash
     * @return bool
     */
   
function password_verify($password, $hash)
    {
        if (
strlen($hash) !== 60 OR strlen($password = crypt($password, $hash)) !== 60)
        {
            return
FALSE;
        }

       
$compare = 0;
        for (
$i = 0; $i < 60; $i++)
        {
           
$compare |= (ord($password[$i]) ^ ord($hash[$i]));
        }

        return (
$compare === 0);
    }
}