9.5/_salted_passwords_utility_8php_source.html

<?php

namespace ‪TYPO3\CMS\Core\Crypto\PasswordHashing;


/*

 * This file is part of the TYPO3 CMS project.

 *

 * It is free software; you can redistribute it and/or modify it under

 * the terms of the GNU General Public License, either version 2

 * of the License, or any later version.

 *

 * For the full copyright and license information, please read the

 * LICENSE.txt file that was distributed with this source code.

 *

 * The TYPO3 project - inspiring people to share!

 */


use ‪TYPO3\CMS\Core\Configuration\ExtensionConfiguration;

use ‪TYPO3\CMS\Core\Database\ConnectionPool;

use ‪TYPO3\CMS\Core\Utility\GeneralUtility;


class ‪SaltedPasswordsUtility

{

    const ‪EXTKEY = 'saltedpasswords';


    public static function ‪getNumberOfBackendUsersWithInsecurePassword()

    {

        trigger_error('SaltedPasswordsUtility::getNumberOfBackendUsersWithInsecurePassword() is obsolete and will be removed in TYPO3 v10.0.', E_USER_DEPRECATED);

        $queryBuilder = GeneralUtility::makeInstance(ConnectionPool::class)->getQueryBuilderForTable('be_users');

        $queryBuilder->getRestrictions()->removeAll();


        $userCount = $queryBuilder

            ->count('*')

            ->from('be_users')

            ->where(

                $queryBuilder->expr()->neq('password', $queryBuilder->createNamedParameter('', \PDO::PARAM_STR)),

                $queryBuilder->expr()->notLike('password', $queryBuilder->createNamedParameter('$%', \PDO::PARAM_STR)),

                $queryBuilder->expr()->notLike('password', $queryBuilder->createNamedParameter('M$%', \PDO::PARAM_STR))

            )

            ->execute()

            ->fetchColumn();


        return $userCount;

    }


    public static function ‪returnExtConf($mode = TYPO3_MODE)

    {

        trigger_error('SaltedPasswordsUtility::returnExtConf() is obsolete and will be removed in TYPO3 v10.0.', E_USER_DEPRECATED);

        $currentConfiguration = ‪self::returnExtConfDefaults();

        if (isset(‪$GLOBALS['TYPO3_CONF_VARS']['EXTENSIONS']['saltedpasswords'])) {

            $extensionConfiguration = GeneralUtility::makeInstance(ExtensionConfiguration::class)->get('saltedpasswords');

            // Merge default configuration with modified configuration:

            if (isset($extensionConfiguration[$mode])) {

                $currentConfiguration = array_merge($currentConfiguration, $extensionConfiguration[$mode]);

            }

        }

        return $currentConfiguration;

    }


    public static function ‪returnExtConfDefaults()

    {

        trigger_error('SaltedPasswordsUtility::returnExtConfDefaults() is obsolete and will be removed in TYPO3 v10.0.', E_USER_DEPRECATED);

        return [

            'saltedPWHashingMethod' => \TYPO3\CMS\Core\Crypto\PasswordHashing\PhpassPasswordHash::class,

        ];

    }


    public static function ‪getDefaultSaltingHashingMethod($mode = TYPO3_MODE)

    {

        trigger_error('SaltedPasswordsUtility::getDefaultSaltingHashingMethod() is obsolete and will be removed in TYPO3 v10.0.', E_USER_DEPRECATED);

        ‪$extConf = ‪self::returnExtConf($mode);

        $classNameToUse = \TYPO3\CMS\Core\Crypto\PasswordHashing\Md5PasswordHash::class;

        if (in_array(

            ‪$extConf['saltedPWHashingMethod'],

            \‪TYPO3\CMS\Core\Crypto\PasswordHashing\‪PasswordHashFactory::getRegisteredSaltedHashingMethods(),

            true

        )) {

            $classNameToUse = ‪$extConf['saltedPWHashingMethod'];

        }

        return $classNameToUse;

    }


    public static function ‪isUsageEnabled()

    {

        trigger_error(

            'SaltedPasswordsUtility::isUsageEnabled() now always returns true and will be removed with TYPO3 v10.0.',

            E_USER_DEPRECATED

        );

        return true;

    }

}