adulau/cakephp2-php8
1
0
Fork 0
mirror of https://github.com/kamilwylegala/cakephp2-php8.git synced 2025-01-18 18:46:17 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Added SecurityComponent class missed in merge from revision [2186]

Browse source 
git-svn-id: https://svn.cakephp.org/repo/trunk/cake@2249 3807eeeb-6ff5-0310-8944-8be069107fe0
This commit is contained in:
phpnut 2006-03-12 00:03:24 +00:00
parent 03ba042f41
commit 0f8f8243d5
1 changed files with 170 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

170
cake/libs/controller/components/security.php Normal file
View file

@ -0,0 +1,170 @@
<?php
/* SVN FILE: $Id$ */
/**
* Short description for file.
*
* Long description for file
*
* PHP versions 4 and 5
*
* CakePHP : Rapid Development Framework <http://www.cakephp.org/>
* Copyright (c) 2006, Cake Software Foundation, Inc.
* 1785 E. Sahara Avenue, Suite 490-204
* Las Vegas, Nevada 89104
*
* Licensed under The MIT License
* Redistributions of files must retain the above copyright notice.
*
* @filesource
* @copyright Copyright (c) 2006, Cake Software Foundation, Inc.
* @link http://www.cakefoundation.org/projects/info/cakephp CakePHP Project
* @package cake
* @subpackage cake.cake.libs.controller.components
* @since CakePHP v 0.10.8.2156
* @version $Revision$
* @modifiedby $LastChangedBy$
* @lastmodified $Date$
* @license http://www.opensource.org/licenses/mit-license.php The MIT License
*/
/**
* Short description for file.
*
* Long description for file
*
* @package cake
* @subpackage cake.cake.libs.controller.components
* @since CakePHP v 0.10.8.2156
*
*/
class SecurityComponent extends Object
{
var $Security = null;
var $blackHoleCallback = null;
var $requirePost = array();
var $requireAuth = array();
var $allowedControllers = array();
var $allowedActions = array();
var $components = array('RequestHandler', 'Session');
/**
* Security class constructor
*
*/
function __construct ()
{
$this->Security = Security::getInstance();
}
function startup(&$controller)
{
if (is_array($this->requirePost) && !empty($this->requirePost))
{
if (in_array($controller->action, $this->requirePost))
{
if (!$this->RequestHandler->isPost())
{
if (!$this->blackHole($controller))
{
return null;
}
}
}
}
if (is_array($this->requireAuth) && !empty($this->requireAuth) && !empty($controller->params['form']))
{
if (in_array($controller->action, $this->requireAuth))
{
if (!isset($controller->params['data']['_Token']))
{
if (!$this->blackHole($controller))
{
return null;
}
}
$token = $controller->params['data']['_Token']['key'];
if ($this->Session->check('_Token'))
{
$tData = $this->Session->read('_Token');
if (!(intval($tData['expires']) > strtotime('now')) || $tData['key'] !== $token)
{
if (!$this->blackHole($controller))
{
return null;
}
}
if (!empty($tData['allowedControllers']) && !in_array($controller->params['controller'], $tData['allowedControllers']) ||!empty($tData['allowedActions']) && !in_array($controller->params['action'], $tData['allowedActions']))
{
if (!$this->blackHole($controller))
{
return null;
}
}
}
else
{
if (!$this->blackHole($controller))
{
return null;
}
}
}
}
// Add auth key for new form posts
$authKey = Security::generateAuthKey();
$expires = strtotime('+'.Security::inactiveMins().' minutes');
$token = array('key' => $authKey,
'expires' => $expires,
'allowedControllers' => $this->allowedControllers,
'allowedActions' => $this->allowedActions
);
if (!isset($controller->params['data']))
{
$controller->params['data'] = array();
}
$controller->params['_Token'] = $token;
$this->Session->write('_Token', $token);
}
/**
* Black-hole an invalid request with a 404 error or custom callback
*
*/
function blackHole(&$controller)
{
if ($this->blackHoleCallback == null)
{
header('HTTP/1.0 404 Not Found');
exit();
}
elseif (method_exists($controller, $this->blackHoleCallback))
{
return $controller->{$this->blackHoleCallback}();
}
}
function requirePost()
{
$this->requirePost = func_get_args();
}
function requireAuth()
{
$this->requireAuth = func_get_args();
}
}
?>