SaltedPasswordsUtility.php

Go to the documentation of this file.

<?php
namespace ‪TYPO3\CMS\Core\Crypto\PasswordHashing;
 
/*
 * This file is part of the TYPO3 CMS project.
 *
 * It is free software; you can redistribute it and/or modify it under
 * the terms of the GNU General Public License, either version 2
 * of the License, or any later version.
 *
 * For the full copyright and license information, please read the
 * LICENSE.txt file that was distributed with this source code.
 *
 * The TYPO3 project - inspiring people to share!
 */
 
use ‪TYPO3\CMS\Core\Configuration\ExtensionConfiguration;
use ‪TYPO3\CMS\Core\Database\ConnectionPool;
use ‪TYPO3\CMS\Core\Utility\GeneralUtility;
 
class ‪SaltedPasswordsUtility
{
    const ‪EXTKEY = 'saltedpasswords';
 
    public static function ‪getNumberOfBackendUsersWithInsecurePassword()
    {
        trigger_error('SaltedPasswordsUtility::getNumberOfBackendUsersWithInsecurePassword() is obsolete and will be removed in TYPO3 v10.0.', E_USER_DEPRECATED);
        $queryBuilder = GeneralUtility::makeInstance(ConnectionPool::class)->getQueryBuilderForTable('be_users');
        $queryBuilder->getRestrictions()->removeAll();
 
        $userCount = $queryBuilder
            ->count('*')
            ->from('be_users')
            ->where(
                $queryBuilder->expr()->neq('password', $queryBuilder->createNamedParameter('', \PDO::PARAM_STR)),
                $queryBuilder->expr()->notLike('password', $queryBuilder->createNamedParameter('$%', \PDO::PARAM_STR)),
                $queryBuilder->expr()->notLike('password', $queryBuilder->createNamedParameter('M$%', \PDO::PARAM_STR))
            )
            ->execute()
            ->fetchColumn();
 
        return $userCount;
    }
 
    public static function ‪returnExtConf($mode = TYPO3_MODE)
    {
        trigger_error('SaltedPasswordsUtility::returnExtConf() is obsolete and will be removed in TYPO3 v10.0.', E_USER_DEPRECATED);
        $currentConfiguration = ‪self::returnExtConfDefaults();
        if (isset(‪$GLOBALS['TYPO3_CONF_VARS']['EXTENSIONS']['saltedpasswords'])) {
            $extensionConfiguration = GeneralUtility::makeInstance(ExtensionConfiguration::class)->get('saltedpasswords');
            // Merge default configuration with modified configuration:
            if (isset($extensionConfiguration[$mode])) {
                $currentConfiguration = array_merge($currentConfiguration, $extensionConfiguration[$mode]);
            }
        }
        return $currentConfiguration;
    }
 
    public static function ‪returnExtConfDefaults()
    {
        trigger_error('SaltedPasswordsUtility::returnExtConfDefaults() is obsolete and will be removed in TYPO3 v10.0.', E_USER_DEPRECATED);
        return [
            'saltedPWHashingMethod' => \TYPO3\CMS\Core\Crypto\PasswordHashing\PhpassPasswordHash::class,
        ];
    }
 
    public static function ‪getDefaultSaltingHashingMethod($mode = TYPO3_MODE)
    {
        trigger_error('SaltedPasswordsUtility::getDefaultSaltingHashingMethod() is obsolete and will be removed in TYPO3 v10.0.', E_USER_DEPRECATED);
        ‪$extConf = ‪self::returnExtConf($mode);
        $classNameToUse = \TYPO3\CMS\Core\Crypto\PasswordHashing\Md5PasswordHash::class;
        if (in_array(
            ‪$extConf['saltedPWHashingMethod'],
            \‪TYPO3\CMS\Core\Crypto\PasswordHashing\‪PasswordHashFactory::getRegisteredSaltedHashingMethods(),
            true
        )) {
            $classNameToUse = ‪$extConf['saltedPWHashingMethod'];
        }
        return $classNameToUse;
    }
 
    public static function ‪isUsageEnabled()
    {
        trigger_error(
            'SaltedPasswordsUtility::isUsageEnabled() now always returns true and will be removed with TYPO3 v10.0.',
            E_USER_DEPRECATED
        );
        return true;
    }
}