Code Coverage |
||||||||||
Classes and Traits |
Functions and Methods |
Lines |
||||||||
| Total | |
100.00% |
1 / 1 |
|
100.00% |
3 / 3 |
CRAP | |
100.00% |
13 / 13 |
| ServerSalt | |
100.00% |
1 / 1 |
|
100.00% |
3 / 3 |
6 | |
100.00% |
13 / 13 |
| generate | |
100.00% |
1 / 1 |
1 | |
100.00% |
1 / 1 |
|||
| get | |
100.00% |
1 / 1 |
4 | |
100.00% |
9 / 9 |
|||
| setStore | |
100.00% |
1 / 1 |
1 | |
100.00% |
3 / 3 |
|||
| <?php | |
| /** | |
| * PrivateBin | |
| * | |
| * a zero-knowledge paste bin | |
| * | |
| * @link https://github.com/PrivateBin/PrivateBin | |
| * @copyright 2012 Sébastien SAUVAGE (sebsauvage.net) | |
| * @license https://www.opensource.org/licenses/zlib-license.php The zlib/libpng License | |
| * @version 1.5.1 | |
| */ | |
| namespace PrivateBin\Persistence; | |
| use PrivateBin\Data\AbstractData; | |
| /** | |
| * ServerSalt | |
| * | |
| * This is a random string which is unique to each PrivateBin installation. | |
| * It is automatically created if not present. | |
| * | |
| * Salt is used: | |
| * - to generate unique VizHash in discussions (which are not reproductible across PrivateBin servers) | |
| * - to generate unique deletion token (which are not re-usable across PrivateBin servers) | |
| */ | |
| class ServerSalt extends AbstractPersistence | |
| { | |
| /** | |
| * generated salt | |
| * | |
| * @access private | |
| * @static | |
| * @var string | |
| */ | |
| private static $_salt = ''; | |
| /** | |
| * generate a large random hexadecimal salt | |
| * | |
| * @access public | |
| * @static | |
| * @return string | |
| */ | |
| public static function generate() | |
| { | |
| return bin2hex(random_bytes(256)); | |
| } | |
| /** | |
| * get server salt | |
| * | |
| * @access public | |
| * @static | |
| * @return string | |
| */ | |
| public static function get() | |
| { | |
| if (strlen(self::$_salt)) { | |
| return self::$_salt; | |
| } | |
| $salt = self::$_store->getValue('salt'); | |
| if ($salt) { | |
| self::$_salt = $salt; | |
| } else { | |
| self::$_salt = self::generate(); | |
| if (!self::$_store->setValue(self::$_salt, 'salt')) { | |
| error_log('failed to store the server salt, delete tokens, traffic limiter and user icons won\'t work'); | |
| } | |
| } | |
| return self::$_salt; | |
| } | |
| /** | |
| * set the path | |
| * | |
| * @access public | |
| * @static | |
| * @param AbstractData $store | |
| */ | |
| public static function setStore(AbstractData $store) | |
| { | |
| self::$_salt = ''; | |
| parent::setStore($store); | |
| } | |
| } |