Changeset 2848 for trunk/filemanager/inc

Timestamp:

05/25/10 10:41:40 (14 years ago)

Author:

amuller

Message:

Ticket #1086 - Utiliza no filemanager a classe RSA implementada na API

Location:

trunk/filemanager/inc

Files:

• class.uifilemanager.inc.php (modified) (3 diffs)
• class.vfs_functions.inc.php (modified) (2 diffs)

trunk/filemanager/inc/class.uifilemanager.inc.php

@@ -601 +601 @@
                                 $vars['css'].='<link rel="stylesheet" type="text/css" href="' . $GLOBALS[ 'phpgw' ] -> link( '/phpgwapi/js/dftree/dftree.css' ) . '">';
                                 $vars[preferences]='<input type="hidden" id="userPreferences" value=\''.serialize($_SESSION['phpgw_info']['user']['preferences']['filemanager']).'\'>';
-                                // Used for important operations that needs security
-                                for ($key = ""; strlen($key) < 150; $key .= chr(rand(48,95)));
-                                $_SESSION['phpgw_info']['filemanager']['user']['sec_key'] = $key;
-                                $vars['sec_key']='<input type="hidden" id="userKey" value=\''.$key.'\'>';
 
                                 $GLOBALS[ 'phpgw_info' ][ 'flags' ][ 'java_script' ] .=  '<script>'
@@ -736 +732 @@
                 function removedir()
                 {
-                        $toRemove = $this->path ^ $_SESSION['phpgw_info']['filemanager']['user']['sec_key'];
+                        require_once('phpgwapi/inc/class.rsa.inc.php');
+                        $rsa = new rsa();                       
+                        $toRemove = $rsa->decode($this->path);
                         if ( $this->bo->vfs->rm(array( 'string' => $toRemove,
                                 'relatives' => array (RELATIVE_NONE)
@@ -1000 +998 @@
 
                                 if ($mime_type == 'text/html'){
-                                        $vars[fck_edit] = '<script type="text/javascript" src="filemanager/tp/ckeditor/ckeditor.js"></script>
+                                        $vars[fck_edit] = '<script type="text/javascript" src="filemanager/tp/ckeditor/ckeditor_basic.js"></script>
                                                 <textarea cols="80" id="edit_file_content" name="edit_file_content" rows="10">'.$content.'</textarea>
                                                 <script type="text/javascript"> CKEDITOR.replace( \'edit_file_content\',{

trunk/filemanager/inc/class.vfs_functions.inc.php

@@ -274 +274 @@
                         $zipFilePath=ini_get("session.save_path")."/".$zipFileName;
                         $command = $zipFilePath.$command;
+                        require_once('phpgwapi/inc/class.rsa.inc.php');
+                        $rsa = new rsa();
 
                         if (strlen($this->pswd) > 0){
-                                $command = " -P ".(base64_decode($this->pswd) ^ $_SESSION['phpgw_info']['filemanager']['user']['sec_key'])." ".$command;
-                        }
+                                $command = " -P ".$rsa->decode(base64_decode($this->pswd))." ".$command;
+                        }
+                        session_start();
+                        $_SESSION['debug'][] = $_SESSION['phpgw_session']['publ_key'];
+                        $_SESSION['debug'][] = $_SESSION['phpgw_session']['priv_key'];
+                        $_SESSION['debug'][] = $_SESSION['phpgw_session']['modulus'];
+                                                               
+                        $_SESSION['debug'][] = $this->pswd;
+                        $_SESSION['debug'][] = base64_decode($this->pswd);
+                        $_SESSION['debug'][] = $rsa->decode(base64_decode($this->pswd));
+                        $_SESSION['debug'][] = $command;
+
 
                         exec("cd ".$this->bo->vfs->basedir.$this->path.";".escapeshellcmd("nice -n19 zip -9 ".$command),$output,$return_var);
@@ -303 +315 @@
                 function unarchive(){
                         $command = escapeshellarg($this->file);
+                        require_once('phpgwapi/inc/class.rsa.inc.php');
+                        $rsa = new rsa();
+
                         if (strlen($this->pswd) > 0){
-                                $command = " -P ".(base64_decode($this->pswd) ^ $_SESSION['phpgw_info']['filemanager']['user']['sec_key'])." ".$command;
+                                $command = " -P ".$rsa->decode(base64_decode($this->pswd))." ".$command;
                         }