sigmasternchen/PHPTools
1
0
Fork 0
mirror of https://github.com/sigmasternchen/PHPTools synced 2025-03-15 07:48:55 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

added hash generator class

Browse source
This commit is contained in:
overflowerror 2014-02-26 19:09:38 +01:00
parent 82250ae038
commit 9a614a5c20
1 changed files with 69 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

69
modules/general/HashGenerator.php Normal file
View file

@ -0,0 +1,69 @@
<?php
if (!defined("ROOT_LOCATION"))
die("root location not defined");
include_once(ROOT_LOCATION . "/modules/general/VirtualSessionManager.php");
class HashGenerator {
private $name;
private $sessionName;
private $id;
private $hash;
private $virtualSession;
public function __construct($name, $id) {
$this->name = $name;
$this->sessionName = $name; // default name
$this->id = $id;
}
public function generate() {
// finden eines unbenützten Session-Namens
$this->virtualSession = new vSession($this->sessionName);
for ($i = 0; $this->virtualSession->exists(); $i++) {
$this->sessionName = $this->name . $i;
$this->virtualSession = new vSession($this->sessionName);
}
// init vSession
$this->virtualSession->init();
$this->hash = hash("sha256", time() * rand());
// Attribute setzen
$this->virtualSession->setAttribute("ID", $this->id);
$this->virtualSession->setAttribute("hash", $this->hash);
$this->virtualSession->setAttribute("time", time());
}
public function printForm() {
echo '<input type="hidden" name="sessionName" value="' . $this->sessionName . '" />';
echo '<input type="hidden" name="hash" value="' . $this->hash . '" />';
}
public function check() {
global $_POST;
// Wenn kein SessionName angegeben ist, wird der default Name verwendet
if (isset($_POST['sessionName']))
$this->sessionName = $_POST['sessionName'];
$this->virtualSession = new vSession($_POST['sessionName']);
if (!$this->virtualSession->exists())
throw new Exception("vSession doesn't exist");
if (!$this->virtualSession->attributeIsset("ID") ||
($this->virtualSession->getAttribute("ID") != $this->id))
throw new Exception("invalid form id");
if (!isset($_POST['hash']) || $this->virtualSession->getAttribute("hash") != $_POST['hash'])
throw new Exception("invalid hash");
if ($this->virtualSession->getAttribute("time") < time() - 60*30)
throw new Exception("form older than 30 minutes");
$this->virtualSession->destroy(); // vSession wird nicht mehr benutzt
return true;
}
}
?>