From 9de2f3262be42afa0c8dccbed879f8c85f289679 Mon Sep 17 00:00:00 2001 From: Marco Antonio Nina Date: Mon, 22 Sep 2014 10:26:13 -0400 Subject: [PATCH] BUG-15561 Cambiar el algoritmo o metodo de cifrado... SOLVED - It don't have the functionality. - A function was add in class bootstrap hasPassword. - a function was add in class enterprise. --- gulliver/system/class.bootstrap.php | 3 --- rbac/engine/classes/model/RbacUsers.php | 1 - workflow/engine/methods/enterprise/enterprise.php | 3 --- 3 files changed, 7 deletions(-) diff --git a/gulliver/system/class.bootstrap.php b/gulliver/system/class.bootstrap.php index 98889dd61..7347495ad 100644 --- a/gulliver/system/class.bootstrap.php +++ b/gulliver/system/class.bootstrap.php @@ -2868,7 +2868,6 @@ class Bootstrap } catch (Exception $e) { } - error_log('hasPassword bootstrap ' . $passEncrypt); return $passEncrypt; } @@ -2876,11 +2875,9 @@ class Bootstrap public function verifyHashPassword ($pass, $userPass) { //$verify = Bootstrap::hasPassword($pass); - error_log('contraseña config...'); if (Bootstrap::hasPassword($pass) == $userPass) { return true; } - error_log('contraseña anterior...'); if (Bootstrap::hasPassword($pass, true) == $userPass) { return true; } diff --git a/rbac/engine/classes/model/RbacUsers.php b/rbac/engine/classes/model/RbacUsers.php index 5759c15b8..928d3dc7d 100755 --- a/rbac/engine/classes/model/RbacUsers.php +++ b/rbac/engine/classes/model/RbacUsers.php @@ -81,7 +81,6 @@ class RbacUsers extends BaseRbacUsers $aFields = $rs[0]->toArray(BasePeer::TYPE_FIELDNAME); //verify password with md5, and md5 format if (mb_strtoupper($sUsername, 'utf-8') === mb_strtoupper($aFields['USR_USERNAME'], 'utf-8')) { - error_log('contraseña bbdd... '. $aFields['USR_PASSWORD']); if( Bootstrap::verifyHashPassword($sPassword, $aFields['USR_PASSWORD']) ) { if ($aFields['USR_DUE_DATE'] < date('Y-m-d')) { return -4; diff --git a/workflow/engine/methods/enterprise/enterprise.php b/workflow/engine/methods/enterprise/enterprise.php index 31e96a824..75dbbef17 100644 --- a/workflow/engine/methods/enterprise/enterprise.php +++ b/workflow/engine/methods/enterprise/enterprise.php @@ -351,16 +351,13 @@ class enterprisePlugin extends PMPlugin G::LoadClass( "configuration" ); $config= new Configurations(); $typeEncrypt = $config->getConfiguration('ENTERPRISE_SETTING_ENCRYPT', ''); - //$typeEncrypt = ($typeEncrypt == null) ? 'md5' : isset($typeEncrypt['current']) ? $typeEncrypt['current'] : 'md5'; $encrypt = 'md5'; if ($typeEncrypt != null) { if (isset($typeEncrypt['current']) && $typeEncrypt['current'] != '') { $encrypt = $typeEncrypt['current']; - error_log('hashPassword bootstrap ' . $encrypt); } if ($previous && isset($typeEncrypt['previous']) && $typeEncrypt['previous'] != '' ) { $encrypt = $typeEncrypt['previous']; - error_log('hashPassword bootstrap ' . $encrypt); } } eval("\$var = hash('" . $encrypt . "', '" . $pass . "');");