LoginFormHook.php

Go to the documentation of this file.

<?php
namespace TYPO3\CMS\Sv;

class LoginFormHook {

    public function getLoginFormTag(array $params, \TYPO3\CMS\Backend\Controller\LoginController &$pObj) {
        // Get the code according to the login level
        switch ($pObj->loginSecurityLevel) {
            case 'challenged':

            case 'superchallenged':
                $_SESSION['login_challenge'] = $this->getChallenge();
                $content = '<form action="index.php" method="post" name="loginform" ' . 'onsubmit="doChallengeResponse(' . ($pObj->loginSecurityLevel == 'challenged' ? 0 : 1) . ');">' . '<input type="hidden" name="challenge" value="' . htmlspecialchars($_SESSION['login_challenge']) . '" />';
                break;
            case 'normal':
                $content = '<form action="index.php" method="post" name="loginform" onsubmit="document.loginform.userident.value=document.loginform.p_field.value;document.loginform.p_field.value=\'\';return true;">';
                break;
            default:
                // No code for unknown level!
                $content = '';
        }
        return $content;
    }

    public function getLoginScripts(array $params, \TYPO3\CMS\Backend\Controller\LoginController &$pObj) {
        $content = '';
        if ($pObj->loginSecurityLevel == 'superchallenged' || $pObj->loginSecurityLevel == 'challenged') {
            $content = '
                <script type="text/javascript" src="sysext/backend/Resources/Public/JavaScript/md5.js"></script>
                ' . $GLOBALS['TBE_TEMPLATE']->wrapScriptTags('
                    function doChallengeResponse(superchallenged) { //
                        password = document.loginform.p_field.value;
                        if (password) {
                            if (superchallenged) {
                                password = MD5(password);   // this makes it superchallenged!!
                            }
                            str = document.loginform.username.value+":"+password+":"+document.loginform.challenge.value;
                            document.loginform.userident.value = MD5(str);
                            document.loginform.p_field.value = "";
                            return true;
                        }
                    }
                    ');
        }
        return $content;
    }

    protected function getChallenge() {
        $challenge = md5(uniqid('', TRUE) . getmypid());
        return $challenge;
    }

}