AS1024
/
Kanboard-Prod
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Improve token generation by using openssl or /dev/urandom or uniqid() as fallback

This commit is contained in:
Frédéric Guillot 2014-03-14 21:08:15 -04:00
parent 04dca7d28d
commit ede188815b
1 changed files with 37 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

43
models/base.php
View File

@ -14,27 +14,58 @@ require __DIR__.'/../vendor/SimpleValidator/Validators/AlphaNumeric.php';
require __DIR__.'/../vendor/SimpleValidator/Validators/GreaterThan.php';
require __DIR__.'/../vendor/SimpleValidator/Validators/Date.php';
/**
* Base model class
*
* @package model
* @author Frederic Guillot
*/
abstract class Base
{
/**
* Database instance
*
* @access protected
* @var PicoDb
*/
protected $db;
/**
* Event dispatcher instance
*
* @access protected
* @var Core\Event
*/
protected $event;
/**
* Constructor
*
* @access public
* @param PicoDb\Database $db Database instance
* @param Core\Event $event Event dispatcher instance
*/
public function __construct(\PicoDb\Database $db, \Core\Event $event)
{
$this->db = $db;
$this->event = $event;
}
// Generate a random token from /dev/urandom or with uniqid()
/**
* Generate a random token with different methods: openssl or /dev/urandom or fallback to uniqid()
*
* @access public
* @return string Random token
*/
public static function generateToken()
{
if (ini_get('open_basedir') === '' && strtoupper(substr(PHP_OS, 0, 3)) !== 'WIN') {
$token = file_get_contents('/dev/urandom', false, null, 0, 30);
if (function_exists('openssl_random_pseudo_bytes')) {
return bin2hex(\openssl_random_pseudo_bytes(16));
}
else {
$token = uniqid(mt_rand(), true);
else if (ini_get('open_basedir') === '' && strtoupper(substr(PHP_OS, 0, 3)) !== 'WIN') {
return hash('sha256', file_get_contents('/dev/urandom', false, null, 0, 30));
}
return hash('crc32b', $token);
return hash('sha256', uniqid(mt_rand(), true));
}
}