Evaluator.php

Go to the documentation of this file.

<?php
namespace TYPO3\CMS\Saltedpasswords\Evaluation;

/*
 * This file is part of the TYPO3 CMS project.
 *
 * It is free software; you can redistribute it and/or modify it under
 * the terms of the GNU General Public License, either version 2
 * of the License, or any later version.
 *
 * For the full copyright and license information, please read the
 * LICENSE.txt file that was distributed with this source code.
 *
 * The TYPO3 project - inspiring people to share!
 */

class Evaluator
{
    protected $mode = null;

    public function returnFieldJS()
    {
        return 'return value;';
    }

    public function evaluateFieldValue($value, $is_in, &$set)
    {
        $isEnabled = $this->mode ? \TYPO3\CMS\Saltedpasswords\Utility\SaltedPasswordsUtility::isUsageEnabled($this->mode) : \TYPO3\CMS\Saltedpasswords\Utility\SaltedPasswordsUtility::isUsageEnabled();
        if ($isEnabled) {
            $isMD5 = preg_match('/[0-9abcdef]{32,32}/', $value);
            $hashingMethod = substr($value, 0, 2);
            $isDeprecatedSaltedHash = ($hashingMethod === 'C$' || $hashingMethod === 'M$');
            $objInstanceSaltedPW = \TYPO3\CMS\Saltedpasswords\Salt\SaltFactory::getSaltingInstance(null, $this->mode);
            if ($isMD5) {
                $set = true;
                $value = 'M' . $objInstanceSaltedPW->getHashedPassword($value);
            } else {
                // Determine method used for the (possibly) salted hashed password
                $tempValue = $isDeprecatedSaltedHash ? substr($value, 1) : $value;
                $tempObjInstanceSaltedPW = \TYPO3\CMS\Saltedpasswords\Salt\SaltFactory::getSaltingInstance($tempValue);
                if (!is_object($tempObjInstanceSaltedPW)) {
                    $set = true;
                    $value = $objInstanceSaltedPW->getHashedPassword($value);
                }
            }
        }
        return $value;
    }
}