simpletool 0.0.1 → 0.0.2

data/lib/support/phpmyadmin/phpmyadmin/libraries/plugins/auth/recaptcha/recaptchalib.php

@@ -0,0 +1,140 @@
+<?php
+/**
+ * This is a PHP library that handles calling reCAPTCHA.
+ *    - Documentation and latest version
+ *          https://developers.google.com/recaptcha/docs/php
+ *    - Get a reCAPTCHA API Key
+ *          https://www.google.com/recaptcha/admin/create
+ *    - Discussion group
+ *          http://groups.google.com/group/recaptcha
+ *
+ * @copyright Copyright (c) 2014, Google Inc.
+ * @link      http://www.google.com/recaptcha
+ *
+ * Permission is hereby granted, free of charge, to any person obtaining a copy
+ * of this software and associated documentation files (the "Software"), to deal
+ * in the Software without restriction, including without limitation the rights
+ * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+ * copies of the Software, and to permit persons to whom the Software is
+ * furnished to do so, subject to the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be included in
+ * all copies or substantial portions of the Software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+ * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+ * THE SOFTWARE.
+ */
+
+/**
+ * A ReCaptchaResponse is returned from checkAnswer().
+ */
+class ReCaptchaResponse
+{
+    public $success;
+    public $errorCodes;
+}
+
+class ReCaptcha
+{
+    private static $_signupUrl = "https://www.google.com/recaptcha/admin";
+    private static $_siteVerifyUrl =
+        "https://www.google.com/recaptcha/api/siteverify?";
+    private $_secret;
+    private static $_version = "php_1.0";
+
+    /**
+     * Constructor.
+     *
+     * @param string $secret shared secret between site and ReCAPTCHA server.
+     */
+    function ReCaptcha($secret)
+    {
+        if ($secret == null || $secret == "") {
+            die("To use reCAPTCHA you must get an API key from <a href='"
+                . self::$_signupUrl . "'>" . self::$_signupUrl . "</a>");
+        }
+        $this->_secret=$secret;
+    }
+
+    /**
+     * Encodes the given data into a query string format.
+     *
+     * @param array $data array of string elements to be encoded.
+     *
+     * @return string - encoded request.
+     */
+    private function _encodeQS($data)
+    {
+        $req = "";
+        foreach ($data as $key => $value) {
+            $req .= $key . '=' . urlencode(stripslashes($value)) . '&';
+        }
+
+        // Cut the last '&'
+        $req=substr($req, 0, strlen($req)-1);
+        return $req;
+    }
+
+    /**
+     * Submits an HTTP GET to a reCAPTCHA server.
+     *
+     * @param string $path url path to recaptcha server.
+     * @param array  $data array of parameters to be sent.
+     *
+     * @return array response
+     */
+    private function _submitHTTPGet($path, $data)
+    {
+        $req = $this->_encodeQS($data);
+        $response = file_get_contents($path . $req);
+        return $response;
+    }
+
+    /**
+     * Calls the reCAPTCHA siteverify API to verify whether the user passes
+     * CAPTCHA test.
+     *
+     * @param string $remoteIp   IP address of end user.
+     * @param string $response   response string from recaptcha verification.
+     *
+     * @return ReCaptchaResponse
+     */
+    public function verifyResponse($remoteIp, $response)
+    {
+        // Discard empty solution submissions
+        if ($response == null || strlen($response) == 0) {
+            $recaptchaResponse = new ReCaptchaResponse();
+            $recaptchaResponse->success = false;
+            $recaptchaResponse->errorCodes = 'missing-input';
+            return $recaptchaResponse;
+        }
+
+        $getResponse = $this->_submitHttpGet(
+            self::$_siteVerifyUrl,
+            array (
+                'secret' => $this->_secret,
+                'remoteip' => $remoteIp,
+                'v' => self::$_version,
+                'response' => $response
+            )
+        );
+        $answers = json_decode($getResponse, true);
+        $recaptchaResponse = new ReCaptchaResponse();
+
+        if (trim($answers ['success']) == true) {
+            $recaptchaResponse->success = true;
+        } else {
+            $recaptchaResponse->success = false;
+            $recaptchaResponse->errorCodes = $answers ['error-codes'];
+        }
+
+        return $recaptchaResponse;
+    }
+}
+
+?>

data/lib/support/phpmyadmin/phpmyadmin/libraries/plugins/auth/swekey/authentication.inc.php

@@ -0,0 +1,176 @@
+<?php
+/**
+ * Authentication functions
+ *
+ * @package Swekey
+ */
+?>
+
+<script>
+
+	var g_SwekeyPlugin = null;
+
+	// -------------------------------------------------------------------
+	// Create the swekey plugin if it does not exists
+	function Swekey_Plugin()
+	{
+		try
+		{
+			if (g_SwekeyPlugin != null)
+				return g_SwekeyPlugin;
+
+			if (window.ActiveXObject)
+			{
+    			g_SwekeyPlugin = document.getElementById("swekey_activex");
+    			if (g_SwekeyPlugin == null)
+    			{
+                        // we must create the activex that way instead of
+                        // new ActiveXObject("FbAuthAx.FbAuthCtl");
+			// otherwise SetClientSite is not called and
+			// we can not get the url
+  			  		var div = document.createElement('div');
+	   				div.innerHTML='<object id="swekey_activex" style="display:none" CLASSID="CLSID:8E02E3F9-57AA-4EE1-AA68-A42DD7B0FADE"></object>';
+
+    				// Never append to the body because it may still loading and it breaks IE
+	   				document.body.insertBefore(div, document.body.firstChild);
+    				g_SwekeyPlugin = document.getElementById("swekey_activex");
+                }
+				return g_SwekeyPlugin;
+			}
+
+			g_SwekeyPlugin = document.getElementById("swekey_plugin");
+			if (g_SwekeyPlugin != null)
+				return g_SwekeyPlugin;
+
+			for (i = 0; i < navigator.plugins.length; i ++)
+			{
+				try
+				{
+				    if (navigator.plugins[i] == null)
+				    {
+				        navigator.plugins.refresh();
+                    }
+                    else if (navigator.plugins[i][0] != null && navigator.plugins[i][0].type == "application/fbauth-plugin")
+					{
+						var x = document.createElement('embed');
+						x.setAttribute('type', 'application/fbauth-plugin');
+						x.setAttribute('id', 'swekey_plugin');
+						x.setAttribute('width', '0');
+						x.setAttribute('height', '0');
+						x.style.dislay='none';
+
+						//document.body.appendChild(x);
+						document.body.insertBefore(x, document.body.firstChild);
+						g_SwekeyPlugin = document.getElementById("swekey_plugin");
+						return g_SwekeyPlugin;
+					}
+				}
+				catch (e)
+				{
+				    navigator.plugins.refresh();
+					//alert ('Failed to create plugin: ' + e);
+				}
+			}
+		}
+		catch (e)
+		{
+			//alert("Swekey_Plugin " + e);
+			g_SwekeyPlugin = null;
+		}
+		return null;
+	}
+
+	// -------------------------------------------------------------------
+	// Returns true if the swekey plugin is installed
+	function Swekey_Installed()
+	{
+		return (Swekey_Plugin() != null);
+	}
+
+	// -------------------------------------------------------------------
+	// List the id of the Swekey connected to the PC
+	// Returns a string containing comma separated Swekey Ids
+    // A Swekey is a 32 char hexadecimal value.
+	function Swekey_ListKeyIds()
+	{
+		try
+		{
+			return Swekey_Plugin().list();
+		}
+		catch (e)
+		{
+//			alert("Swekey_ListKeyIds " + e);
+		}
+		return "";
+	}
+
+	// -------------------------------------------------------------------
+	// Ask the Connected Swekey to generate an OTP
+	// id: The id of the connected Swekey (returne by Swekey_ListKeyIds())
+	// rt: A random token
+	// return: The calculated OTP encoded in a 64 chars hexadecimal value.
+	function Swekey_GetOtp(id, rt)
+	{
+		try
+		{
+			return Swekey_Plugin().getotp(id, rt);
+		}
+		catch (e)
+		{
+//			alert("Swekey_GetOtp " + e);
+		}
+		return "";
+	}
+
+	// -------------------------------------------------------------------
+	// Ask the Connected Swekey to generate a OTP linked to the current https host
+	// id: The id of the connected Swekey (returne by Swekey_ListKeyIds())
+	// rt: A random token
+	// return: The calculated OTP encoded in a 64 chars hexadecimal value.
+	// or "" if the current url does not start with https
+	function Swekey_GetLinkedOtp(id, rt)
+	{
+		try
+		{
+			return Swekey_Plugin().getlinkedotp(id, rt);
+		}
+		catch (e)
+		{
+//			alert("Swekey_GetSOtp " + e);
+		}
+		return "";
+	}
+
+	// -------------------------------------------------------------------
+    // Calls Swekey_GetOtp or Swekey_GetLinkedOtp depending if we are in
+    // an https page or not.
+	// id: The id of the connected Swekey (returne by Swekey_ListKeyIds())
+	// rt: A random token
+	// return: The calculated OTP encoded in a 64 chars hexadecimal value.
+	function Swekey_GetSmartOtp(id, rt)
+	{
+        var res = Swekey_GetLinkedOtp(id, rt);
+        if (res == "")
+            res = Swekey_GetOtp(id, rt);
+
+		return res;
+	}
+
+	// -------------------------------------------------------------------
+	// Set a unplug handler (url) to the specified connected feebee
+	// id: The id of the connected Swekey (returne by Swekey_ListKeyIds())
+	// key: The key that index that url, (aplhanumeric values only)
+	// url: The url that will be launched ("" deletes the url)
+	function Swekey_SetUnplugUrl(id, key, url)
+	{
+		try
+		{
+			return Swekey_Plugin().setunplugurl(id, key, url);
+		}
+		catch (e)
+		{
+//			alert("Swekey_SetUnplugUrl " + e);
+		}
+	}
+
+</script>

data/lib/support/phpmyadmin/phpmyadmin/libraries/plugins/auth/swekey/musbe-ca.crt

@@ -0,0 +1,25 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

data/lib/support/phpmyadmin/phpmyadmin/libraries/plugins/auth/swekey/swekey.auth.lib.php

@@ -0,0 +1,318 @@
+<?php
+/* vim: set expandtab sw=4 ts=4 sts=4: */
+/**
+ * Swekey
+ *
+ * @package Swekey
+ */
+
+if (! defined('PHPMYADMIN')) {
+    exit;
+}
+
+/**
+ * Checks Swekey authentication.
+ *
+ * @return boolean whether authentication succeeded or not
+ */
+function Swekey_Auth_check()
+{
+    global $cfg;
+    $confFile = $cfg['Server']['auth_swekey_config'];
+
+    if (! isset($_SESSION['SWEKEY'])) {
+        $_SESSION['SWEKEY'] = array();
+    }
+
+    $_SESSION['SWEKEY']['ENABLED'] = (! empty($confFile) && file_exists($confFile));
+
+    // Load the swekey.conf file the first time
+    if ($_SESSION['SWEKEY']['ENABLED']
+        && empty($_SESSION['SWEKEY']['CONF_LOADED'])
+    ) {
+        $_SESSION['SWEKEY']['CONF_LOADED'] = true;
+        $_SESSION['SWEKEY']['VALID_SWEKEYS'] = array();
+        $valid_swekeys = explode("\n", @file_get_contents($confFile));
+        foreach ($valid_swekeys as $line) {
+            if (preg_match("/^[0-9A-F]{32}:.+$/", $line) != false) {
+                $items = explode(":", $line);
+                if (count($items) == 2) {
+                    $_SESSION['SWEKEY']['VALID_SWEKEYS'][$items[0]]
+                        = trim($items[1]);
+                }
+            } elseif (preg_match("/^[A-Z_]+=.*$/", $line) != false) {
+                $items = explode("=", $line);
+                $_SESSION['SWEKEY']['CONF_' . trim($items[0])] = trim($items[1]);
+            }
+        }
+
+        // Set default values for settings
+        if (! isset($_SESSION['SWEKEY']['CONF_SERVER_CHECK'])) {
+            $_SESSION['SWEKEY']['CONF_SERVER_CHECK'] = "";
+        }
+        if (! isset($_SESSION['SWEKEY']['CONF_SERVER_RNDTOKEN'])) {
+            $_SESSION['SWEKEY']['CONF_SERVER_RNDTOKEN'] = "";
+        }
+        if (! isset($_SESSION['SWEKEY']['CONF_SERVER_STATUS'])) {
+             $_SESSION['SWEKEY']['CONF_SERVER_STATUS'] = "";
+        }
+        if (! isset($_SESSION['SWEKEY']['CONF_CA_FILE'])) {
+            $_SESSION['SWEKEY']['CONF_CA_FILE'] = "";
+        }
+        if (! isset($_SESSION['SWEKEY']['CONF_ENABLE_TOKEN_CACHE'])) {
+            $_SESSION['SWEKEY']['CONF_ENABLE_TOKEN_CACHE'] = true;
+        }
+        if (! isset($_SESSION['SWEKEY']['CONF_DEBUG'])) {
+               $_SESSION['SWEKEY']['CONF_DEBUG'] = false;
+        }
+    }
+
+    // check if a web key has been authenticated
+    if ($_SESSION['SWEKEY']['ENABLED']) {
+        if (empty($_SESSION['SWEKEY']['AUTHENTICATED_SWEKEY'])) {
+            return false;
+        }
+    }
+
+    return true;
+}
+
+
+/**
+ * Handle Swekey authentication error.
+ *
+ * @return string HTML
+ */
+function Swekey_Auth_error()
+{
+    if (! isset($_SESSION['SWEKEY'])) {
+        return null;
+    }
+
+    if (! $_SESSION['SWEKEY']['ENABLED']) {
+        return null;
+    }
+
+    include_once './libraries/plugins/auth/swekey/authentication.inc.php';
+
+    ?>
+    <script>
+    function Swekey_GetValidKey()
+    {
+        var valids = "<?php
+    foreach ($_SESSION['SWEKEY']['VALID_SWEKEYS'] as $key => $value) {
+                echo $key . ',';
+    }
+        ?>";
+        var connected_keys = Swekey_ListKeyIds().split(",");
+        for (i in connected_keys) {
+            if (connected_keys[i] != null && connected_keys[i].length == 32) {
+                if (valids.indexOf(connected_keys[i]) >= 0) {
+                   return connected_keys[i];
+                }
+            }
+        }
+
+
+        if (connected_keys.length > 0) {
+            if (connected_keys[0].length == 32) {
+                return "unknown_key_" + connected_keys[0];
+            }
+        }
+
+        return "none";
+    }
+
+    var key = Swekey_GetValidKey();
+
+    function timedCheck()
+    {
+        if (key != Swekey_GetValidKey()) {
+            window.location.search = "?swekey_reset";
+        } else {
+            setTimeout("timedCheck()",1000);
+        }
+    }
+
+    setTimeout("timedCheck()",1000);
+    </script>
+     <?php
+
+    if (! empty($_SESSION['SWEKEY']['AUTHENTICATED_SWEKEY'])) {
+        return null;
+    }
+
+    if (count($_SESSION['SWEKEY']['VALID_SWEKEYS']) == 0) {
+        return sprintf(
+            __('File %s does not contain any key id'),
+            $GLOBALS['cfg']['Server']['auth_swekey_config']
+        );
+    }
+
+    include_once "libraries/plugins/auth/swekey/swekey.php";
+
+    Swekey_SetCheckServer($_SESSION['SWEKEY']['CONF_SERVER_CHECK']);
+    Swekey_SetRndTokenServer($_SESSION['SWEKEY']['CONF_SERVER_RNDTOKEN']);
+    Swekey_SetStatusServer($_SESSION['SWEKEY']['CONF_SERVER_STATUS']);
+    Swekey_EnableTokenCache($_SESSION['SWEKEY']['CONF_ENABLE_TOKEN_CACHE']);
+
+    $caFile = $_SESSION['SWEKEY']['CONF_CA_FILE'];
+    if (empty($caFile)) {
+        $caFile = __FILE__;
+        $pos = strrpos($caFile, '/');
+        if ($pos === false) {
+            $pos = strrpos($caFile, '\\'); // windows
+        }
+        $caFile = substr($caFile, 0, $pos + 1) . 'musbe-ca.crt';
+        //        echo "\n<!-- $caFile -->\n";
+        //        if (file_exists($caFile))
+        //            echo "<!-- exists -->\n";
+    }
+
+    if (file_exists($caFile)) {
+        Swekey_SetCAFile($caFile);
+    } elseif (! empty($caFile)
+        && (substr($_SESSION['SWEKEY']['CONF_SERVER_CHECK'], 0, 8) == "https://")
+    ) {
+        return "Internal Error: CA File $caFile not found";
+    }
+
+    $result = null;
+    $swekey_id = $_GET['swekey_id'];
+    $swekey_otp = $_GET['swekey_otp'];
+
+    if (isset($swekey_id)) {
+        unset($_SESSION['SWEKEY']['AUTHENTICATED_SWEKEY']);
+        if (! isset($_SESSION['SWEKEY']['RND_TOKEN'])) {
+            unset($swekey_id);
+        } else {
+            if (strlen($swekey_id) == 32) {
+                $res = Swekey_CheckOtp(
+                    $swekey_id, $_SESSION['SWEKEY']['RND_TOKEN'], $swekey_otp
+                );
+                unset($_SESSION['SWEKEY']['RND_TOKEN']);
+                if (! $res) {
+                    $result = __('Hardware authentication failed!') . ' (' . Swekey_GetLastError() . ')';
+                } else {
+                    $_SESSION['SWEKEY']['AUTHENTICATED_SWEKEY'] = $swekey_id;
+                    $_SESSION['SWEKEY']['FORCE_USER']
+                        = $_SESSION['SWEKEY']['VALID_SWEKEYS'][$swekey_id];
+                    return null;
+                }
+            } else {
+                $result = __('No valid authentication key plugged');
+                if ($_SESSION['SWEKEY']['CONF_DEBUG']) {
+                    $result .= "<br/>" . htmlspecialchars($swekey_id);
+                }
+                unset($_SESSION['SWEKEY']['CONF_LOADED']); // reload the conf file
+            }
+        }
+    } else {
+        unset($_SESSION['SWEKEY']);
+    }
+
+    $_SESSION['SWEKEY']['RND_TOKEN'] = Swekey_GetFastRndToken();
+    if (strlen($_SESSION['SWEKEY']['RND_TOKEN']) != 64) {
+        $result = __('Hardware authentication failed!') . ' (' . Swekey_GetLastError() . ')';
+        unset($_SESSION['SWEKEY']['CONF_LOADED']); // reload the conf file
+    }
+
+    if (! isset($swekey_id)) {
+        ?>
+        <script>
+        if (key.length != 32) {
+            window.location.search="?swekey_id=" + key + "&token=<?php echo $_SESSION[' PMA_token ']; ?>";
+        } else {
+            var url = "" + window.location;
+            if (url.indexOf("?") > 0) {
+                url = url.substr(0, url.indexOf("?"));
+            }
+            Swekey_SetUnplugUrl(key, "pma_login", url + "?session_to_unset=<?php echo session_id();?>&token=<?php echo $_SESSION[' PMA_token ']; ?>");
+            var otp = Swekey_GetOtp(key, <?php echo '"' . $_SESSION['SWEKEY']['RND_TOKEN'] . '"';?>);
+            window.location.search="?swekey_id=" + key + "&swekey_otp=" + otp + "&token=<?php echo $_SESSION[' PMA_token ']; ?>";
+        }
+        </script>
+        <?php
+        return __('Authenticating…');
+    }
+
+    return $result;
+}
+
+
+/**
+ * Perform login using Swekey.
+ *
+ * @param string $input_name Input "Name"
+ * @param string $input_go   Input "Go"
+ *
+ * @return void
+ */
+function Swekey_login($input_name, $input_go)
+{
+    $swekeyErr = Swekey_Auth_error();
+    if ($swekeyErr != null) {
+        PMA_Message::error($swekeyErr)->display();
+        if ($GLOBALS['error_handler']->hasDisplayErrors()) {
+            echo '<div>';
+            $GLOBALS['error_handler']->dispErrors();
+            echo '</div>';
+        }
+    }
+
+    if (isset($_SESSION['SWEKEY']) && $_SESSION['SWEKEY']['ENABLED']) {
+        echo '<script type="text/javascript">';
+        if (empty($_SESSION['SWEKEY']['FORCE_USER'])) {
+            echo 'var user = null;';
+        } else {
+            echo 'var user = "' . $_SESSION['SWEKEY']['FORCE_USER'] . '";';
+        }
+
+        ?>
+            function open_swekey_site()
+            {
+                window.open("<?php echo PMA_linkURL('http://phpmyadmin.net/auth_key'); ?>");
+            }
+
+            var input_username = document.getElementById("<?php echo $input_name; ?>");
+            var input_go = document.getElementById("<?php echo $input_go; ?>");
+            var swekey_status = document.createElement('img');
+            swekey_status.setAttribute('onclick', 'open_swekey_site()');
+            swekey_status.setAttribute('style', 'width:8px; height:16px; border:0px; vspace:0px; hspace:0px; frameborder:no');
+            if (user == null) {
+                swekey_status.setAttribute('src', 'http://artwork.swekey.com/unplugged-8x16.png');
+                //swekey_status.setAttribute('title', 'No swekey plugged');
+                input_go.disabled = true;
+            } else {
+                swekey_status.setAttribute('src', 'http://artwork.swekey.com/plugged-8x16.png');
+                //swekey_status.setAttribute('title', 'swekey plugged');
+                input_username.value = user;
+            }
+            input_username.readOnly = true;
+
+            if (input_username.nextSibling == null) {
+                input_username.parentNode.appendChild(swekey_status);
+            } else {
+                input_username.parentNode.insertBefore(swekey_status, input_username.nextSibling);
+            }
+
+        <?php
+        echo '</script>';
+    }
+}
+
+if (!empty($_GET['session_to_unset'])) {
+    session_write_close();
+    session_id($_GET['session_to_unset']);
+    session_start();
+    $_SESSION = array();
+    session_write_close();
+    session_destroy();
+    exit;
+}
+
+if (isset($_GET['swekey_reset'])) {
+    unset($_SESSION['SWEKEY']);
+}
+
+?>