2013-10-31 20:15:14 -04:00
|
|
|
<?php
|
|
|
|
/**
|
2016-07-11 05:58:15 -04:00
|
|
|
* PrivateBin
|
2013-10-31 20:15:14 -04:00
|
|
|
*
|
|
|
|
* a zero-knowledge paste bin
|
|
|
|
*
|
2016-07-11 05:58:15 -04:00
|
|
|
* @link https://github.com/PrivateBin/PrivateBin
|
2013-10-31 20:15:14 -04:00
|
|
|
* @copyright 2012 Sébastien SAUVAGE (sebsauvage.net)
|
2016-07-19 07:56:52 -04:00
|
|
|
* @license https://www.opensource.org/licenses/zlib-license.php The zlib/libpng License
|
2016-08-25 03:53:31 -04:00
|
|
|
* @version 1.0
|
2013-10-31 20:15:14 -04:00
|
|
|
*/
|
2016-12-12 12:43:23 -05:00
|
|
|
|
|
|
|
namespace PrivateBin;\Persistence;
|
2016-07-21 11:09:48 -04:00
|
|
|
|
|
|
|
use Exception;
|
|
|
|
|
2013-10-31 20:15:14 -04:00
|
|
|
/**
|
2016-08-09 05:54:42 -04:00
|
|
|
* ServerSalt
|
2013-10-31 20:15:14 -04:00
|
|
|
*
|
2016-07-11 05:58:15 -04:00
|
|
|
* This is a random string which is unique to each PrivateBin installation.
|
2013-10-31 20:15:14 -04:00
|
|
|
* It is automatically created if not present.
|
|
|
|
*
|
|
|
|
* Salt is used:
|
2016-07-11 05:58:15 -04:00
|
|
|
* - to generate unique VizHash in discussions (which are not reproductible across PrivateBin servers)
|
|
|
|
* - to generate unique deletion token (which are not re-usable across PrivateBin servers)
|
2013-10-31 20:15:14 -04:00
|
|
|
*/
|
2016-08-09 05:54:42 -04:00
|
|
|
class ServerSalt extends AbstractPersistence
|
2013-10-31 20:15:14 -04:00
|
|
|
{
|
2016-08-10 17:15:06 -04:00
|
|
|
/**
|
|
|
|
* file where salt is saved to
|
|
|
|
*
|
|
|
|
* @access private
|
|
|
|
* @static
|
|
|
|
* @var string
|
|
|
|
*/
|
|
|
|
private static $_file = 'salt.php';
|
|
|
|
|
2013-10-31 20:15:14 -04:00
|
|
|
/**
|
2015-08-16 09:55:31 -04:00
|
|
|
* generated salt
|
|
|
|
*
|
2013-10-31 20:15:14 -04:00
|
|
|
* @access private
|
|
|
|
* @static
|
|
|
|
* @var string
|
|
|
|
*/
|
|
|
|
private static $_salt = '';
|
|
|
|
|
|
|
|
/**
|
|
|
|
* generate a large random hexadecimal salt
|
|
|
|
*
|
|
|
|
* @access public
|
|
|
|
* @static
|
|
|
|
* @return string
|
|
|
|
*/
|
|
|
|
public static function generate()
|
|
|
|
{
|
2016-08-10 17:15:06 -04:00
|
|
|
$randomSalt = bin2hex(random_bytes(256));
|
2015-08-27 15:41:21 -04:00
|
|
|
return $randomSalt;
|
2013-10-31 20:15:14 -04:00
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* get server salt
|
|
|
|
*
|
|
|
|
* @access public
|
|
|
|
* @static
|
2015-08-27 15:41:21 -04:00
|
|
|
* @throws Exception
|
2013-10-31 20:15:14 -04:00
|
|
|
* @return string
|
|
|
|
*/
|
|
|
|
public static function get()
|
|
|
|
{
|
2016-07-26 02:19:35 -04:00
|
|
|
if (strlen(self::$_salt)) {
|
|
|
|
return self::$_salt;
|
|
|
|
}
|
2013-10-31 20:15:14 -04:00
|
|
|
|
2016-08-10 17:15:06 -04:00
|
|
|
if (self::_exists(self::$_file)) {
|
|
|
|
if (is_readable(self::getPath(self::$_file))) {
|
|
|
|
$items = explode('|', file_get_contents(self::getPath(self::$_file)));
|
2016-08-09 05:54:42 -04:00
|
|
|
}
|
|
|
|
if (!isset($items) || !is_array($items) || count($items) != 3) {
|
2016-08-10 17:15:06 -04:00
|
|
|
throw new Exception('unable to read file ' . self::getPath(self::$_file), 20);
|
2015-08-27 15:41:21 -04:00
|
|
|
}
|
|
|
|
self::$_salt = $items[1];
|
|
|
|
} else {
|
|
|
|
self::$_salt = self::generate();
|
2013-02-24 11:41:32 -05:00
|
|
|
self::_store(
|
2016-08-10 17:15:06 -04:00
|
|
|
self::$_file,
|
2016-08-09 05:54:42 -04:00
|
|
|
'<?php /* |' . self::$_salt . '| */ ?>'
|
2013-02-24 11:41:32 -05:00
|
|
|
);
|
2013-10-31 20:15:14 -04:00
|
|
|
}
|
2015-08-27 15:41:21 -04:00
|
|
|
return self::$_salt;
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* set the path
|
|
|
|
*
|
|
|
|
* @access public
|
|
|
|
* @static
|
|
|
|
* @param string $path
|
|
|
|
* @return void
|
|
|
|
*/
|
|
|
|
public static function setPath($path)
|
|
|
|
{
|
2016-07-26 02:19:35 -04:00
|
|
|
self::$_salt = '';
|
2015-08-27 15:41:21 -04:00
|
|
|
parent::setPath($path);
|
2013-10-31 20:15:14 -04:00
|
|
|
}
|
|
|
|
}
|