SaltedPasswordsUtility.php

Go to the documentation of this file.

<?php
namespace TYPO3\CMS\Saltedpasswords\Utility;

class SaltedPasswordsUtility {

    const EXTKEY = 'saltedpasswords';

    static public function getNumberOfBackendUsersWithInsecurePassword() {
        $userCount = $GLOBALS['TYPO3_DB']->exec_SELECTcountRows(
            '*',
            'be_users',
            'password != \'\''
                . ' AND password NOT LIKE ' . $GLOBALS['TYPO3_DB']->fullQuoteStr('$%', 'be_users')
                . ' AND password NOT LIKE ' . $GLOBALS['TYPO3_DB']->fullQuoteStr('M$%', 'be_users')
        );
        return $userCount;
    }

    static public function returnExtConf($mode = TYPO3_MODE) {
        $currentConfiguration = self::returnExtConfDefaults();
        if (isset($GLOBALS['TYPO3_CONF_VARS']['EXT']['extConf']['saltedpasswords'])) {
            $extensionConfiguration = unserialize($GLOBALS['TYPO3_CONF_VARS']['EXT']['extConf']['saltedpasswords']);
            // Merge default configuration with modified configuration:
            if (isset($extensionConfiguration[$mode . '.'])) {
                $currentConfiguration = array_merge($currentConfiguration, $extensionConfiguration[$mode . '.']);
            }
        }
        return $currentConfiguration;
    }

    public function feloginForgotPasswordHook(array &$params, \TYPO3\CMS\Felogin\Controller\FrontendLoginController $pObj) {
        if (self::isUsageEnabled('FE')) {
            $objInstanceSaltedPW = \TYPO3\CMS\Saltedpasswords\Salt\SaltFactory::getSaltingInstance();
            $params['newPassword'] = $objInstanceSaltedPW->getHashedPassword($params['newPassword']);
        }
    }

    static public function returnExtConfDefaults() {
        return array(
            'onlyAuthService' => '0',
            'forceSalted' => '0',
            'updatePasswd' => '1',
            'saltedPWHashingMethod' => 'TYPO3\\CMS\\Saltedpasswords\\Salt\\PhpassSalt',
            'enabled' => '1'
        );
    }

    static public function getDefaultSaltingHashingMethod($mode = TYPO3_MODE) {
        $extConf = self::returnExtConf($mode);
        $classNameToUse = 'TYPO3\\CMS\\Saltedpasswords\\Salt\\Md5Salt';
        if (in_array($extConf['saltedPWHashingMethod'], array_keys(\TYPO3\CMS\Saltedpasswords\Salt\SaltFactory::getRegisteredSaltedHashingMethods()))) {
            $classNameToUse = $extConf['saltedPWHashingMethod'];
        }
        return $classNameToUse;
    }

    static public function isUsageEnabled($mode = TYPO3_MODE) {
        // Login Security Level Recognition
        $extConf = self::returnExtConf($mode);
        $securityLevel = $GLOBALS['TYPO3_CONF_VARS'][$mode]['loginSecurityLevel'];
        if ($mode == 'BE') {
            return TRUE;
        } elseif ($mode == 'FE' && $extConf['enabled']) {
            return \TYPO3\CMS\Core\Utility\GeneralUtility::inList('normal,rsa', $securityLevel);
        }
        return FALSE;
    }

}