2013-11-01 00:15:14 +00:00
|
|
|
<?php
|
|
|
|
/**
|
2016-07-11 09:58:15 +00:00
|
|
|
* PrivateBin
|
2013-11-01 00:15:14 +00:00
|
|
|
*
|
|
|
|
* a zero-knowledge paste bin
|
|
|
|
*
|
2016-07-11 09:58:15 +00:00
|
|
|
* @link https://github.com/PrivateBin/PrivateBin
|
2013-11-01 00:15:14 +00:00
|
|
|
* @copyright 2012 Sébastien SAUVAGE (sebsauvage.net)
|
2016-07-19 11:56:52 +00:00
|
|
|
* @license https://www.opensource.org/licenses/zlib-license.php The zlib/libpng License
|
2024-05-13 17:18:30 +00:00
|
|
|
* @version 1.7.3
|
2013-11-01 00:15:14 +00:00
|
|
|
*/
|
2016-12-12 17:43:23 +00:00
|
|
|
|
2016-12-12 17:49:08 +00:00
|
|
|
namespace PrivateBin\Persistence;
|
2016-07-21 15:09:48 +00:00
|
|
|
|
2021-06-08 20:01:29 +00:00
|
|
|
use PrivateBin\Data\AbstractData;
|
2016-07-21 15:09:48 +00:00
|
|
|
|
2013-11-01 00:15:14 +00:00
|
|
|
/**
|
2016-08-09 09:54:42 +00:00
|
|
|
* ServerSalt
|
2013-11-01 00:15:14 +00:00
|
|
|
*
|
2016-07-11 09:58:15 +00:00
|
|
|
* This is a random string which is unique to each PrivateBin installation.
|
2013-11-01 00:15:14 +00:00
|
|
|
* It is automatically created if not present.
|
|
|
|
*
|
|
|
|
* Salt is used:
|
2016-07-11 09:58:15 +00:00
|
|
|
* - to generate unique VizHash in discussions (which are not reproductible across PrivateBin servers)
|
|
|
|
* - to generate unique deletion token (which are not re-usable across PrivateBin servers)
|
2013-11-01 00:15:14 +00:00
|
|
|
*/
|
2016-08-09 09:54:42 +00:00
|
|
|
class ServerSalt extends AbstractPersistence
|
2013-11-01 00:15:14 +00:00
|
|
|
{
|
|
|
|
/**
|
2015-08-16 13:55:31 +00:00
|
|
|
* generated salt
|
|
|
|
*
|
2013-11-01 00:15:14 +00:00
|
|
|
* @access private
|
|
|
|
* @static
|
|
|
|
* @var string
|
|
|
|
*/
|
|
|
|
private static $_salt = '';
|
|
|
|
|
|
|
|
/**
|
|
|
|
* generate a large random hexadecimal salt
|
|
|
|
*
|
|
|
|
* @access public
|
|
|
|
* @static
|
|
|
|
* @return string
|
|
|
|
*/
|
|
|
|
public static function generate()
|
|
|
|
{
|
2021-06-13 08:44:26 +00:00
|
|
|
return bin2hex(random_bytes(256));
|
2013-11-01 00:15:14 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* get server salt
|
|
|
|
*
|
|
|
|
* @access public
|
|
|
|
* @static
|
|
|
|
* @return string
|
|
|
|
*/
|
|
|
|
public static function get()
|
|
|
|
{
|
2024-04-18 19:36:43 +00:00
|
|
|
if (!empty(self::$_salt)) {
|
2016-07-26 06:19:35 +00:00
|
|
|
return self::$_salt;
|
|
|
|
}
|
2013-11-01 00:15:14 +00:00
|
|
|
|
2021-06-08 20:01:29 +00:00
|
|
|
$salt = self::$_store->getValue('salt');
|
|
|
|
if ($salt) {
|
|
|
|
self::$_salt = $salt;
|
2015-08-27 19:41:21 +00:00
|
|
|
} else {
|
|
|
|
self::$_salt = self::generate();
|
2021-06-16 03:32:45 +00:00
|
|
|
if (!self::$_store->setValue(self::$_salt, 'salt')) {
|
|
|
|
error_log('failed to store the server salt, delete tokens, traffic limiter and user icons won\'t work');
|
|
|
|
}
|
2013-11-01 00:15:14 +00:00
|
|
|
}
|
2015-08-27 19:41:21 +00:00
|
|
|
return self::$_salt;
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* set the path
|
|
|
|
*
|
|
|
|
* @access public
|
|
|
|
* @static
|
2021-06-08 20:01:29 +00:00
|
|
|
* @param AbstractData $store
|
2015-08-27 19:41:21 +00:00
|
|
|
*/
|
2021-06-08 20:01:29 +00:00
|
|
|
public static function setStore(AbstractData $store)
|
2015-08-27 19:41:21 +00:00
|
|
|
{
|
2016-07-26 06:19:35 +00:00
|
|
|
self::$_salt = '';
|
2021-06-08 20:01:29 +00:00
|
|
|
parent::setStore($store);
|
2013-11-01 00:15:14 +00:00
|
|
|
}
|
|
|
|
}
|