cakephp2-php8/cake/libs/security.php
mariano.iglesias 24dd6ddb0a Adding comments for Sanitize and Security
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@5194 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-05-26 06:35:44 +00:00

160 lines
No EOL
3.5 KiB
PHP

<?php
/* SVN FILE: $Id$ */
/**
* Short description for file.
*
* Long description for file
*
* PHP versions 4 and 5
*
* CakePHP(tm) : Rapid Development Framework <http://www.cakephp.org/>
* Copyright 2005-2007, Cake Software Foundation, Inc.
* 1785 E. Sahara Avenue, Suite 490-204
* Las Vegas, Nevada 89104
*
* Licensed under The MIT License
* Redistributions of files must retain the above copyright notice.
*
* @filesource
* @copyright Copyright 2005-2007, Cake Software Foundation, Inc.
* @link http://www.cakefoundation.org/projects/info/cakephp CakePHP(tm) Project
* @package cake
* @subpackage cake.cake.libs
* @since CakePHP(tm) v .0.10.0.1233
* @version $Revision$
* @modifiedby $LastChangedBy$
* @lastmodified $Date$
* @license http://www.opensource.org/licenses/mit-license.php The MIT License
*/
/**
* Short description for file.
*
* Long description for file
*
* @package cake
* @subpackage cake.cake.libs
*/
class Security extends Object{
/**
* Singleton implementation to get object instance.
*
* @return object
* @access public
* @static
*/
function &getInstance() {
static $instance = array();
if (!$instance) {
$instance[0] =& new Security;
}
return $instance[0];
}
/**
* Get allowed minutes of inactivity based on security level.
*
* @return int Allowed inactivity in minutes
* @access public
* @static
*/
function inactiveMins() {
$_this =& Security::getInstance();
switch(CAKE_SECURITY) {
case 'high':
return 10;
break;
case 'medium':
return 100;
break;
case 'low':
default:
return 300;
break;
}
}
/**
* Generate authorization hash.
*
* @return string Hash
* @access public
* @static
*/
function generateAuthKey() {
$_this =& Security::getInstance();
return $_this->hash(uniqid(rand(), true));
}
/**
* Validate authorization hash.
*
* @param string $authKey Authorization hash
* @return boolean Success
* @access public
* @static
*/
function validateAuthKey($authKey) {
$_this =& Security::getInstance();
return true;
}
/**
* Create a hash from string using given method.
*
* @param string $string String to hash
* @param string $type Method to use (sha1/sha256/md5)
* @return string Hash
* @access public
* @static
*/
function hash($string, $type = 'sha1') {
$_this =& Security::getInstance();
$type = strtolower($type);
if ($type == 'sha1') {
if (function_exists('sha1')) {
$return = sha1($string);
return $return;
} else {
$type = 'sha256';
}
}
if ($type == 'sha256') {
if (function_exists('mhash')) {
$return = bin2hex(mhash(MHASH_SHA256, $string));
return $return;
} else {
$type = 'md5';
}
}
if ($type == 'md5') {
$return = md5($string);
return $return;
}
}
/**
* Encripts/Decrypts a text using the given key.
*
* @param string $text Encrypted string to decrypt, normal string to encrypt
* @param string $key Key to use
* @return string Encrypted/Decrypted string
* @access public
* @static
*/
function cipher($text, $key) {
$_this =& Security::getInstance();
if (!defined('CIPHER_SEED')) {
//This is temporary will change later
define('CIPHER_SEED', '76859309657453542496749683645');
}
srand (CIPHER_SEED);
$out = '';
for($i = 0; $i < strlen($text); $i++) {
for($j = 0; $j < ord(substr($key, $i % strlen($key), 1)); $j++) {
$toss = rand(0, 255);
}
$mask = rand(0, 255);
$out .= chr(ord(substr($text, $i, 1)) ^ $mask);
}
return $out;
}
}
?>